Attachment 194701 Details for Bug 289371 – audit-log

audit-log

audit.log (text/plain), 1.38 MB, created by Matěj Cepl on 2007-09-13 15:03:05 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Matěj Cepl

Created: 2007-09-13 15:03:05 UTC

Size: 1.38 MB

patch

obsolete

>type=DAEMON_START msg=audit(1187903970.036:6424) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2299 res=success, auditd pid=2299
>type=CONFIG_CHANGE msg=audit(1187903969.982:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187903969.982:29): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1187903969.982:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187903969.982:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USYS_CONFIG msg=audit(1187904024.241:32): user pid=3130 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USYS_CONFIG msg=audit(1187904055.236:33): user pid=3170 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ERR msg=audit(1187904095.730:34): user pid=3213 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187904109.228:35): user pid=3283 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187904109.228:36): user pid=3283 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187904109.228:37): user pid=3283 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187904109.228:38): login pid=3283 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187904109.228:39): user pid=3283 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187904109.228:40): user pid=3283 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187904145.223:41): user pid=3580 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187904145.223:42): user pid=3580 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187904145.723:43): user pid=3580 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187904162.720:44): user pid=3580 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1187904190.216:45): user pid=3610 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187904190.216:46): user pid=3610 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187904190.216:47): user pid=3610 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187904210.713:48): user pid=3610 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1187904259.205:49): user pid=3783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1187904259.205:50): user pid=3783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1187904259.205:51): user pid=3783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1187904259.205:52): user pid=3783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1187906461.369:53): user pid=3883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187906461.369:54): user pid=3883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187906461.369:55): login pid=3883 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187906461.369:56): user pid=3883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187906461.369:57): user pid=3883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187906461.369:58): user pid=3883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187906775.321:59): user pid=3783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1187906775.321:60): user pid=3783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1187906790.819:61): user pid=3993 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1187906790.819:62): user pid=3993 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1187906801.317:63): user pid=3994 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1187906804.817:64): user pid=3996 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1187906804.817:65): user pid=3996 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1187906804.817:66): user pid=3996 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1187906804.817:67): user pid=3996 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1187906879.805:68): user pid=3996 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1187906879.805:69): user pid=3996 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1187906910.301:70): user pid=4116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187906910.301:71): user pid=4116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187906910.301:72): user pid=4116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187906910.301:73): user pid=4116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187907382.229:74): user pid=4116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187907382.229:75): user pid=4116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187907451.218:76): user pid=3283 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187907451.218:77): user pid=3283 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187907460.334:6425) auditd normal halt, sending auid=4294967295 pid=4851 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2299
>type=DAEMON_START msg=audit(1187907634.249:387) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2144 res=success, auditd pid=2144
>type=CONFIG_CHANGE msg=audit(1187907634.156:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187907634.156:29): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1187907634.156:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187907634.156:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1187907653.653:32): user pid=2968 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187907893.617:33): user pid=2962 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1187907893.617:34): user pid=2962 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1187907893.617:35): login pid=2962 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1187907893.617:36): user pid=2962 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1187907893.617:37): user pid=2962 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1187907893.617:38): user pid=2962 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1187907893.617:39): user pid=2962 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1187907900.116:40): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1187907900.116:41): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1187907900.116:42): login pid=2963 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1187907900.116:43): user pid=2963 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1187907900.116:44): user pid=2963 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1187907900.116:45): user pid=2963 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1187907900.116:46): user pid=2963 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1187908621.506:47): user pid=2963 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1187908621.506:48): user pid=2963 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1187908623.006:49): user pid=2962 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1187908623.006:50): user pid=2962 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1187908642.265:388) auditd normal halt, sending auid=4294967295 pid=4125 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2144
>type=DAEMON_START msg=audit(1187908716.615:1564) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2176 res=success, auditd pid=2176
>type=CONFIG_CHANGE msg=audit(1187908716.276:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187908716.276:29): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1187908716.276:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187908716.276:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1187908736.273:32): user pid=3036 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187908749.271:33): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187908749.271:34): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187908749.271:35): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187908749.271:36): login pid=3107 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187908749.271:37): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187908749.271:38): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187908851.255:39): user pid=3487 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187908851.255:40): user pid=3487 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187908851.255:41): user pid=3487 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187908938.242:42): user pid=3487 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187908989.234:43): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187908989.234:44): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187909005.732:45): user pid=3030 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1187909005.732:46): user pid=3030 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1187909005.732:47): login pid=3030 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1187909005.732:48): user pid=3030 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1187909005.732:49): user pid=3030 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1187909005.732:50): user pid=3030 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1187909005.732:51): user pid=3030 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1187909036.727:52): user pid=3030 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1187909036.727:53): user pid=3030 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1187909041.286:1565) auditd normal halt, sending auid=4294967295 pid=4225 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2176
>type=DAEMON_START msg=audit(1187939471.526:5082) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2248 res=success, auditd pid=2248
>type=CONFIG_CHANGE msg=audit(1187939471.721:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187939471.721:29): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1187939471.721:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187939471.721:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1187939491.718:32): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187939513.214:33): user pid=3180 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187939513.214:34): user pid=3180 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187939513.214:35): user pid=3180 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187939513.214:36): login pid=3180 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187939513.214:37): user pid=3180 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187939513.214:38): user pid=3180 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187939518.713:39): user pid=3180 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187939518.713:40): user pid=3180 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187939545.021:5083) auditd normal halt, sending auid=4294967295 pid=3842 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2248
>type=DAEMON_START msg=audit(1187986480.049:8652) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2252 res=success, auditd pid=2252
>type=CONFIG_CHANGE msg=audit(1187986479.901:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187986479.901:29): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1187986479.901:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187986479.901:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1187986500.398:32): user pid=3116 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187986600.383:33): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1187986600.383:34): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1187986600.383:35): login pid=3110 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1187986600.883:36): user pid=3110 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1187986600.883:37): user pid=3110 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1187986600.883:38): user pid=3110 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1187986600.883:39): user pid=3110 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1187986604.882:40): user pid=3110 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1187986604.882:41): user pid=3110 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1187986609.382:42): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187986609.382:43): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187986609.382:44): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187986609.382:45): login pid=3186 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187986609.382:46): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187986609.382:47): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187986622.880:48): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187986622.880:49): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187986691.869:50): user pid=3283 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1187986691.869:51): user pid=3283 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1187986691.869:52): login pid=3283 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1187986691.869:53): user pid=3283 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1187986691.869:54): user pid=3283 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1187986691.869:55): user pid=3283 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1187986691.869:56): user pid=3283 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1187986739.862:57): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187986739.862:58): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187986739.862:59): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187986739.862:60): login pid=3186 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187986739.862:61): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187986739.862:62): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187987049.315:63): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187987049.315:64): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188158462.291:65): user pid=4131 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188158462.291:66): user pid=4131 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188158462.291:67): login pid=4131 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188158462.291:68): user pid=4131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188158462.291:69): user pid=4131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188158462.291:70): user pid=4131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188159414.880:71): user pid=3111 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188159414.880:72): user pid=3111 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188159414.880:73): login pid=3111 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188159414.880:74): user pid=3111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188159414.880:75): user pid=3111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188159414.880:76): user pid=3111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188159414.880:77): user pid=3111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188160017.324:78): user pid=3111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188160017.324:79): user pid=3111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188160040.823:80): user pid=7513 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188160040.823:81): user pid=7513 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188160040.823:82): login pid=7513 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188160041.323:83): user pid=7513 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188160041.323:84): user pid=7513 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188160041.323:85): user pid=7513 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188160041.323:86): user pid=7513 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188160583.291:87): user pid=7513 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188160583.291:88): user pid=7513 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188160665.287:89): user pid=8335 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188160665.287:90): user pid=8335 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188160665.287:91): login pid=8335 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188160665.287:92): user pid=8335 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188160665.287:93): user pid=8335 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188160665.287:94): user pid=8335 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188160665.287:95): user pid=8335 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188160726.783:96): user pid=3112 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1188160726.783:97): user pid=3112 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=LOGIN msg=audit(1188160726.783:98): login pid=3112 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188160726.783:99): user pid=3112 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1188160726.783:100): user pid=3112 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1188160726.783:101): user pid=3112 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1188160726.783:102): user pid=3112 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1188162061.686:103): user pid=10077 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188162061.686:104): user pid=10077 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188162061.686:105): login pid=10077 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188162061.686:106): user pid=10077 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188162061.686:107): user pid=10077 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188162061.686:108): user pid=10077 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188163604.447:109): user pid=3112 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1188163604.447:110): user pid=3112 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1188163750.927:111): user pid=4247 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1188163750.927:112): user pid=4247 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=LOGIN msg=audit(1188163750.927:113): login pid=4247 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188163750.927:114): user pid=4247 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1188163750.927:115): user pid=4247 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1188163750.927:116): user pid=4247 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1188163750.927:117): user pid=4247 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1188165661.467:118): user pid=4820 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188165661.467:119): user pid=4820 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188165661.467:120): login pid=4820 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188165661.467:121): user pid=4820 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188165661.467:122): user pid=4820 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188165661.467:123): user pid=4820 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188169059.931:124): user pid=4247 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1188169059.931:125): user pid=4247 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1188169261.418:126): user pid=5617 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188169261.418:127): user pid=5617 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188169261.418:128): login pid=5617 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188169261.418:129): user pid=5617 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188169261.918:130): user pid=5617 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188169261.918:131): user pid=5617 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188169763.899:132): user pid=5532 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1188169763.899:133): user pid=5532 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=LOGIN msg=audit(1188169763.899:134): login pid=5532 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188169763.899:135): user pid=5532 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1188169763.899:136): user pid=5532 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1188169763.899:137): user pid=5532 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1188169763.899:138): user pid=5532 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1188170148.386:139): user pid=3113 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1188170148.386:140): user pid=3113 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=LOGIN msg=audit(1188170148.386:141): login pid=3113 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188170148.386:142): user pid=3113 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1188170148.386:143): user pid=3113 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1188170148.386:144): user pid=3113 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_LOGIN msg=audit(1188170148.386:145): user pid=3113 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_DISP msg=audit(1188170171.885:146): user pid=3113 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1188170171.885:147): user pid=3113 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_AUTH msg=audit(1188170395.879:148): user pid=5944 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1188170395.879:149): user pid=5944 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=LOGIN msg=audit(1188170395.879:150): login pid=5944 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188170395.879:151): user pid=5944 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1188170395.879:152): user pid=5944 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1188170395.879:153): user pid=5944 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_LOGIN msg=audit(1188170395.879:154): user pid=5944 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_DISP msg=audit(1188170423.378:155): user pid=5944 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1188170423.378:156): user pid=5944 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1188172860.926:157): user pid=6700 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188172860.926:158): user pid=6700 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188172860.926:159): login pid=6700 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188172860.926:160): user pid=6700 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188172861.426:161): user pid=6700 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188172861.426:162): user pid=6700 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188176462.470:163): user pid=7493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188176462.470:164): user pid=7493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188176462.470:165): login pid=7493 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188176462.470:166): user pid=7493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188176462.470:167): user pid=7493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188176462.470:168): user pid=7493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188180061.996:169): user pid=8250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188180061.996:170): user pid=8250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188180061.996:171): login pid=8250 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188180061.996:172): user pid=8250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188180061.996:173): user pid=8250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188180061.996:174): user pid=8250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188180120.998:175): user pid=8287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188180120.998:176): user pid=8287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188180120.998:177): login pid=8287 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188180120.998:178): user pid=8287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188181803.513:179): user pid=8287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188181803.513:180): user pid=8287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188183662.046:181): user pid=9537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188183662.046:182): user pid=9537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188183662.046:183): login pid=9537 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188183662.046:184): user pid=9537 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188183662.046:185): user pid=9537 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188183662.046:186): user pid=9537 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188187261.591:187): user pid=10385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188187261.591:188): user pid=10385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188187261.591:189): login pid=10385 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188187261.591:190): user pid=10385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188187261.591:191): user pid=10385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188187261.591:192): user pid=10385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188190033.125:193): user pid=8335 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188190033.125:194): user pid=8335 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188190039.125:195): user pid=5532 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1188190039.125:196): user pid=5532 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1188190181.626:197): user pid=11034 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188190181.626:198): user pid=11034 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188190181.626:199): login pid=11034 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1188190181.626:200): user pid=11034 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188190181.626:201): user pid=11034 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188190181.626:202): user pid=11034 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188190182.126:203): user pid=11034 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188190209.627:204): user pid=11064 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1188190209.627:205): user pid=11064 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1188190209.627:206): user pid=11064 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=LOGIN msg=audit(1188190209.627:207): login pid=11064 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188190209.627:208): user pid=11064 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1188190209.627:209): user pid=11115 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=/dev/pts/0 res=success)'
>type=CRED_REFR msg=audit(1188190209.627:210): user pid=11115 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1188190861.634:211): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188190861.634:212): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188190861.634:213): login pid=11330 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188190861.634:214): user pid=11330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188190861.634:215): user pid=11330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188190861.634:216): user pid=11330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188192626.652:217): user pid=11034 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188192626.652:218): user pid=11034 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188192649.152:219): user pid=11787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188192649.152:220): user pid=11787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188192649.152:221): login pid=11787 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188192649.152:222): user pid=11787 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188192649.152:223): user pid=11787 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188192649.152:224): user pid=11787 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188192649.152:225): user pid=11787 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188192742.653:226): user pid=11881 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1188192742.653:227): user pid=11881 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1188192742.653:228): user pid=11881 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=LOGIN msg=audit(1188192742.653:229): login pid=11881 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188192742.653:230): user pid=11881 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1188192742.653:231): user pid=11885 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1188192774.153:232): user pid=11881 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_END msg=audit(1188192774.153:233): user pid=11881 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1188192970.156:234): user pid=11064 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_END msg=audit(1188192970.156:235): user pid=11064 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1188192970.656:236): user pid=11787 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188192970.656:237): user pid=11787 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188192971.156:238): user pid=3283 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1188192971.156:239): user pid=3283 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1188192981.900:8653) auditd normal halt, sending auid=4294967295 pid=12505 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2252
>type=DAEMON_START msg=audit(1188202697.848:2123) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2304 res=success, auditd pid=2304
>type=CONFIG_CHANGE msg=audit(1188202697.532:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188202697.532:29): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188202697.532:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188202697.532:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188202715.530:32): avc:  denied  { search } for  pid=3146 comm="procmail" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir
>type=SYSCALL msg=audit(1188202715.530:32): arch=40000003 syscall=5 success=no exit=-13 a0=8116d90 a1=8000 a2=0 a3=8000 items=0 ppid=2666 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1188202715.530:33): avc:  denied  { search } for  pid=3149 comm="procmail" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir
>type=SYSCALL msg=audit(1188202715.530:33): arch=40000003 syscall=5 success=no exit=-13 a0=9bb5d90 a1=8000 a2=0 a3=8000 items=0 ppid=2666 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1188202715.530:34): avc:  denied  { search } for  pid=3150 comm="procmail" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir
>type=SYSCALL msg=audit(1188202715.530:34): arch=40000003 syscall=5 success=no exit=-13 a0=9ed0d90 a1=8000 a2=0 a3=8000 items=0 ppid=2666 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ERR msg=audit(1188202718.530:35): user pid=3166 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188202740.530:36): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188202740.530:37): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188202740.530:38): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188202740.530:39): login pid=3255 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188202740.530:40): user pid=3255 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188202740.530:41): user pid=3255 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.localdomain, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188202996.525:42): user pid=3726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188202996.525:43): user pid=3726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188202996.525:44): user pid=3726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188202996.525:45): user pid=3726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1188203159.022:46): avc:  denied  { getattr } for  pid=3811 comm="named" name="random" dev=dm-0 ino=1274849 scontext=user_u:system_r:named_t:s0 tcontext=system_u:object_r:named_conf_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1188203159.022:46): arch=40000003 syscall=195 success=no exit=-13 a0=b7eb3068 a1=b7eac0c8 a2=4b7ff4 a3=3 items=0 ppid=3809 pid=3811 auid=500 uid=25 gid=25 euid=25 suid=25 fsuid=25 egid=25 sgid=25 fsgid=25 tty=(none) comm="named" exe="/usr/sbin/named" subj=user_u:system_r:named_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188203159.022:46):  path="/dev/random"
>type=USER_ACCT msg=audit(1188205260.982:47): user pid=3913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188205260.982:48): user pid=3913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188205260.982:49): login pid=3913 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188205260.982:50): user pid=3913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188205260.982:51): user pid=3913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188205260.982:52): user pid=3913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188208463.421:53): user pid=3726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188208463.421:54): user pid=3726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188208860.913:55): user pid=4063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188208860.913:56): user pid=4063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188208860.913:57): login pid=4063 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188208860.913:58): user pid=4063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188208860.913:59): user pid=4063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188208860.913:60): user pid=4063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188209276.905:61): user pid=4077 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188209276.905:62): user pid=4077 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188209276.905:63): user pid=4077 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188209276.905:64): user pid=4077 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1188210894.374:65): user pid=4406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188210894.374:66): user pid=4406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188210897.374:67): user pid=4408 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188210897.374:68): user pid=4408 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188210897.374:69): user pid=4408 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188210897.374:70): user pid=4408 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188212460.844:71): user pid=4489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188212460.844:72): user pid=4489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188212460.844:73): login pid=4489 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188212460.844:74): user pid=4489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188212460.844:75): user pid=4489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188212460.844:76): user pid=4489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188216061.276:77): user pid=4601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1188216061.276:78): user pid=4601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1188216061.276:79): login pid=4601 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188216061.276:80): user pid=4601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188216061.276:81): user pid=4601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188216061.276:82): user pid=4601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188217297.752:83): user pid=4077 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188217297.752:84): user pid=4077 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CHAUTHTOK msg=audit(1188218173.735:85): user pid=4744 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1188218330.732:86): user pid=5115 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=ntp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1188218330.732:87): user pid=5116 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=ntp exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1188218353.732:88): user pid=5141 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=wbpriv exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1188218528.729:89): user pid=8475 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=apache exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1188218589.728:90): user pid=8635 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1188218589.728:91): user pid=8636 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1188218600.227:92): user pid=8714 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=tcpdump exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1188218600.227:93): user pid=8715 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=tcpdump exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1188218602.227:94): user pid=8757 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=rpcuser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=AVC msg=audit(1188218604.227:95): avc:  denied  { search } for  pid=8807 comm="rpc.statd" name="sbin" dev=dm-0 ino=4998818 scontext=user_u:system_r:rpcd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1188218604.227:95): arch=40000003 syscall=11 success=no exit=-13 a0=80008a12 a1=bfa63bac a2=bfa63dfc a3=80d93008 items=0 ppid=8806 pid=8807 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=user_u:system_r:rpcd_t:s0 key=(null)
>type=AVC msg=audit(1188218604.227:96): avc:  denied  { search } for  pid=8806 comm="rpc.statd" scontext=user_u:system_r:rpcd_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1188218604.227:96): arch=40000003 syscall=5 success=no exit=-13 a0=80009054 a1=8001 a2=0 a3=8001 items=0 ppid=8805 pid=8806 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=user_u:system_r:rpcd_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1188218698.725:97): user pid=9100 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=nscd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1188218750.224:98): user pid=9245 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=rpm exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1188218750.724:99): user pid=9246 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=rpm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AVC msg=audit(1188218927.721:100): user pid=2463 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1188218927.721:101): policy loaded auid=500
>type=SYSCALL msg=audit(1188218927.721:101): arch=40000003 syscall=4 success=yes exit=1571286 a0=4 a1=b7dc8000 a2=17f9d6 a3=bff47988 items=0 ppid=9602 pid=9603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=CRED_DISP msg=audit(1188219389.304:102): user pid=4408 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188219389.304:103): user pid=4408 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188219426.303:104): user pid=12861 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188219426.303:105): user pid=12861 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1188219444.802:106): user pid=12863 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188219444.802:107): user pid=12863 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188219444.802:108): user pid=12863 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188219444.802:109): user pid=12863 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1188219444.802:110): user pid=12863 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188219444.802:111): user pid=12863 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188219452.302:112): user pid=3255 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188219452.302:113): user pid=3255 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1188219461.879:2124) auditd normal halt, sending auid=4294967295 pid=13490 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2304
>type=DAEMON_START msg=audit(1188219817.406:9978) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2128 res=success, auditd pid=2128
>type=CONFIG_CHANGE msg=audit(1188219817.506:66): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188219817.506:67): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188219817.542:68): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188219817.542:69): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=ANOM_ABEND msg=audit(1188219837.685:70): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2837 comm="hald-addon-acpi" sig=11
>type=USER_ERR msg=audit(1188219839.665:71): user pid=2984 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188219880.990:72): user pid=3089 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188219880.994:73): user pid=3089 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188219880.994:74): user pid=3089 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188219881.000:75): login pid=3089 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188219881.013:76): user pid=3089 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188219881.014:77): user pid=3089 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.localdomain, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188220299.653:78): user pid=3382 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_END msg=audit(1188220305.635:79): user pid=3089 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188220305.635:80): user pid=3089 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188220308.943:81): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2695 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1188220312.438:9979) auditd normal halt, sending auid=4294967295 pid=3984 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2128
>type=DAEMON_START msg=audit(1188220623.194:5804) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2104 res=success, auditd pid=2104
>type=CONFIG_CHANGE msg=audit(1188220623.293:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188220623.293:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188220623.334:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188220623.334:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1188220645.369:9): user pid=2952 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188220647.732:10): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2809 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188220666.555:11): user pid=3058 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188220666.559:12): user pid=3058 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188220666.559:13): user pid=3058 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188220666.564:14): login pid=3058 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188220666.584:15): user pid=3058 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188220666.586:16): user pid=3058 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.localdomain, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188220953.449:17): user pid=3346 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188220953.449:18): user pid=3346 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188220953.531:19): user pid=3346 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188221102.389:20): user pid=3360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188221102.389:21): user pid=3360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188221102.395:22): user pid=3360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188221188.107:23): user pid=3346 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188221202.208:24): user pid=3368 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188221202.208:25): user pid=3368 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188221202.214:26): user pid=3368 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188221331.297:27): user pid=3360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188221345.959:28): user pid=3458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1188221348.307:29): user pid=3459 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188221348.308:30): user pid=3459 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188221348.326:31): user pid=3459 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188221348.326:32): user pid=3459 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188221398.130:33): user pid=3368 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188223261.631:34): user pid=3834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188223399.963:35): user pid=3459 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188223399.965:36): user pid=3459 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1188223408.788:37): user pid=3860 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188223408.788:38): user pid=3860 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188223408.801:39): user pid=3860 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188223905.358:40): user pid=3860 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188223985.507:41): user pid=3993 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188223985.507:42): user pid=3993 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188223985.521:43): user pid=3993 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188223985.521:44): user pid=3993 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1188224006.450:45): user pid=3993 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188224006.451:46): user pid=3993 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1188224128.239:47): user pid=4083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188224128.239:48): user pid=4083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188224128.296:49): user pid=4083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188224128.296:50): user pid=4083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1188224172.205:51): user pid=4083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188224172.206:52): user pid=4083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1188224178.064:53): user pid=4190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188224178.064:54): user pid=4190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188224178.085:55): user pid=4190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1188226488.252:56): user pid=5253 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=tomcat exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1188226488.444:57): user pid=5257 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=tomcat exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188226862.309:58): user pid=5826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188228321.044:59): user pid=5976 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188228324.700:60): user pid=5977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188228324.700:61): user pid=5977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188228324.849:62): user pid=5977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188228324.866:63): user pid=5977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188228347.457:64): user pid=5977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188228347.458:65): user pid=5977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1188228357.100:66): avc:  denied  { execmod } for  pid=6015 comm="gst-inspect-0.1" name="libtheora.so.0.2.0" dev=dm-0 ino=5005234 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188228357.100:66): arch=40000003 syscall=125 success=no exit=-13 a0=5103000 a1=48000 a2=5 a3=bff7ce60 items=0 ppid=6014 pid=6015 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-inspect-0.1" exe="/usr/bin/gst-inspect-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188228357.100:66):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188228357.440:67): avc:  denied  { execmod } for  pid=6015 comm="gst-inspect-0.1" name="libtheora.so.0.2.0" dev=dm-0 ino=5005234 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188228357.440:67): arch=40000003 syscall=125 success=no exit=-13 a0=1104000 a1=48000 a2=5 a3=bff7ce60 items=0 ppid=6014 pid=6015 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-inspect-0.1" exe="/usr/bin/gst-inspect-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188228357.440:67):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188228357.943:68): avc:  denied  { execmod } for  pid=6015 comm="gst-inspect-0.1" name="libtheora.so.0.2.0" dev=dm-0 ino=5005234 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188228357.943:68): arch=40000003 syscall=125 success=no exit=-13 a0=1c91000 a1=48000 a2=5 a3=bff7ce60 items=0 ppid=6014 pid=6015 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-inspect-0.1" exe="/usr/bin/gst-inspect-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188228357.943:68):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188228358.331:69): avc:  denied  { execmod } for  pid=6015 comm="gst-inspect-0.1" name="libtheora.so.0.2.0" dev=dm-0 ino=5005234 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188228358.331:69): arch=40000003 syscall=125 success=no exit=-13 a0=1348000 a1=48000 a2=5 a3=bff7ce60 items=0 ppid=6014 pid=6015 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-inspect-0.1" exe="/usr/bin/gst-inspect-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188228358.331:69):  path="/usr/lib/libtheora.so.0.2.0"
>type=USER_AUTH msg=audit(1188228420.869:70): user pid=6025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188228420.869:71): user pid=6025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188228420.878:72): user pid=6025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188228420.878:73): user pid=6025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188228446.450:74): user pid=6025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188228446.450:75): user pid=6025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188229273.090:76): user pid=4190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188229340.409:77): user pid=6133 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188229343.580:78): user pid=6135 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188229343.580:79): user pid=6135 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188229343.596:80): user pid=6135 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188229343.597:81): user pid=6135 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188229408.377:82): user pid=6135 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188229408.378:83): user pid=6135 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188229417.938:84): user pid=6174 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188229417.938:85): user pid=6174 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188229417.950:86): user pid=6174 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188230461.661:87): user pid=6214 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188231154.611:88): user pid=6174 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188231312.224:89): user pid=6289 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188231312.224:90): user pid=6289 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188231312.238:91): user pid=6289 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188231544.456:92): user pid=6289 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188231601.207:93): user pid=6312 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188231601.207:94): user pid=6312 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188231601.213:95): user pid=6312 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188231608.650:96): user pid=6312 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188231695.729:97): user pid=6320 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188231695.730:98): user pid=6320 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188231695.735:99): user pid=6320 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188231897.559:100): user pid=6320 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188231909.255:101): user pid=6401 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188231909.255:102): user pid=6401 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188231909.277:103): user pid=6401 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188231909.278:104): user pid=6401 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188231951.374:105): user pid=6401 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188231951.375:106): user pid=6401 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1188232780.499:107): user pid=6629 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1188279510.000:108): user pid=6734 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188279566.463:109): user pid=6892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188279566.463:110): user pid=6892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188279566.605:111): user pid=6892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188279566.605:112): user pid=6892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188279953.808:113): user pid=6892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188279953.809:114): user pid=6892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188279954.489:115): user pid=3058 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188279954.490:116): user pid=3058 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188279958.509:117): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2664 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1188279967.034:5805) auditd normal halt, sending auid=4294967295 pid=7541 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2104
>type=DAEMON_START msg=audit(1188280144.850:5422) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2103 res=success, auditd pid=2103
>type=CONFIG_CHANGE msg=audit(1188280144.950:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188280144.950:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188280144.999:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188280144.999:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1188280166.777:9): user pid=2945 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188280183.806:10): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2825 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188280198.868:11): user pid=3039 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188280198.872:12): user pid=3039 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188280198.872:13): user pid=3039 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188280198.877:14): login pid=3039 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188280198.897:15): user pid=3039 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188280198.899:16): user pid=3039 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.localdomain, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188280791.142:17): user pid=3395 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188280791.142:18): user pid=3395 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188280791.217:19): user pid=3395 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188280791.218:20): user pid=3395 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188280861.302:21): user pid=3456 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188280896.094:22): user pid=3395 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188280896.094:23): user pid=3395 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188281123.556:24): user pid=3668 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188281123.556:25): user pid=3668 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188281123.620:26): user pid=3668 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188281123.620:27): user pid=3668 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188281123.641:28): user pid=3668 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188281123.641:29): user pid=3668 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188281181.359:30): user pid=3673 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188281181.359:31): user pid=3673 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188281181.374:32): user pid=3673 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188281181.375:33): user pid=3673 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188281290.265:34): user pid=3673 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188281290.266:35): user pid=3673 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188281943.348:36): user pid=3039 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188281943.349:37): user pid=3039 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188281946.757:38): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2663 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1188281950.498:5423) auditd normal halt, sending auid=4294967295 pid=4521 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2103
>type=DAEMON_START msg=audit(1188286015.340:2780) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2122 res=success, auditd pid=2122
>type=CONFIG_CHANGE msg=audit(1188286015.439:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188286015.439:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188286015.488:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188286015.488:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=ANOM_ABEND msg=audit(1188286034.510:9): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2850 comm="hald-addon-acpi" sig=11
>type=USER_ERR msg=audit(1188286037.576:10): user pid=2990 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188286136.633:11): user pid=3086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1188286136.634:12): user pid=3086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.localdomain, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1188286140.686:13): user pid=3086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188286140.690:14): user pid=3086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188286140.691:15): user pid=3086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188286140.694:16): login pid=3086 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188286140.715:17): user pid=3086 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188286140.716:18): user pid=3086 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.localdomain, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188286203.539:19): user pid=3495 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188286203.539:20): user pid=3495 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188286203.620:21): user pid=3495 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188286203.620:22): user pid=3495 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188286261.612:23): user pid=3495 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188286261.612:24): user pid=3495 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188286956.875:25): user pid=3692 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188286956.876:26): user pid=3692 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188286956.889:27): user pid=3692 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188286956.889:28): user pid=3692 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188286962.806:29): user pid=3692 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188286962.806:30): user pid=3692 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188287011.932:31): user pid=3731 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188287013.945:32): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188287013.945:33): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188287013.965:34): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188287013.965:35): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188287017.745:36): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188287017.746:37): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188287017.871:38): user pid=3086 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188287017.871:39): user pid=3086 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188287049.452:40): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2681 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1188287053.182:2781) auditd normal halt, sending auid=4294967295 pid=4540 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2122
>type=DAEMON_START msg=audit(1188287133.565:6528) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2179 res=success, auditd pid=2179
>type=CONFIG_CHANGE msg=audit(1188287133.664:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188287133.664:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188287133.713:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188287133.713:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_AUTH msg=audit(1188287155.314:9): user pid=3167 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188287155.315:10): user pid=3167 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1188287155.320:11): login pid=3167 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188287155.532:12): user pid=3167 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188287155.543:13): user pid=3167 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1188287155.555:14): user pid=3167 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1188287155.570:15): user pid=3167 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1188287278.484:16): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=3089 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188287542.345:17): user pid=3168 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188287542.345:18): user pid=3168 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188287542.349:19): login pid=3168 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188287542.528:20): user pid=3168 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188287542.531:21): user pid=3168 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188287542.531:22): user pid=3168 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188287542.531:23): user pid=3168 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188287716.791:24): user pid=3168 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188287716.793:25): user pid=3168 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188287755.365:26): user pid=3495 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188287755.366:27): user pid=3495 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188287755.367:28): login pid=3495 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188287755.545:29): user pid=3495 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188287755.547:30): user pid=3495 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188287755.548:31): user pid=3495 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188287755.548:32): user pid=3495 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188287795.937:33): user pid=3495 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188287795.938:34): user pid=3495 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188287890.582:35): user pid=3563 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188287890.582:36): user pid=3563 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188287890.584:37): login pid=3563 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188287890.664:38): user pid=3563 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188287890.666:39): user pid=3563 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188287890.667:40): user pid=3563 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188287890.667:41): user pid=3563 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188287895.159:42): user pid=3563 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188287895.159:43): user pid=3563 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188287935.979:44): user pid=3623 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188287935.979:45): user pid=3623 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188287935.981:46): login pid=3623 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188287936.172:47): user pid=3623 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188287936.174:48): user pid=3623 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188287936.174:49): user pid=3623 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188287936.175:50): user pid=3623 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188288061.503:51): user pid=3685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188288140.110:52): user pid=3692 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188288140.110:53): user pid=3692 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188288140.120:54): user pid=3692 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188288140.120:55): user pid=3692 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188288453.852:56): user pid=3169 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1188288453.853:57): user pid=3169 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=LOGIN msg=audit(1188288453.855:58): login pid=3169 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188288454.034:59): user pid=3169 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1188288454.036:60): user pid=3169 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1188288454.036:61): user pid=3169 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1188288454.037:62): user pid=3169 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1188288465.213:63): user pid=3692 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188288465.213:64): user pid=3692 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188288487.821:65): user pid=3623 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188288487.822:66): user pid=3623 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188288490.926:67): user pid=3772 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188288490.926:68): user pid=3772 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188288490.929:69): login pid=3772 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188288491.121:70): user pid=3772 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188288491.123:71): user pid=3772 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188288491.124:72): user pid=3772 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188288491.125:73): user pid=3772 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188288493.978:74): user pid=3823 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188288493.978:75): user pid=3823 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188288493.980:76): user pid=3823 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188288493.980:77): user pid=3823 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188288533.997:78): user pid=3823 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188288533.998:79): user pid=3823 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=ANOM_ABEND msg=audit(1188288588.486:80): auid=0 uid=25 gid=25 subj=root:system_r:named_t:s0 pid=4022 comm="named" sig=11
>type=ANOM_ABEND msg=audit(1188288588.486:81): auid=0 uid=25 gid=25 subj=root:system_r:named_t:s0 pid=4023 comm="named" sig=11
>type=ANOM_ABEND msg=audit(1188288610.995:82): auid=0 uid=25 gid=25 subj=root:system_r:named_t:s0 pid=4086 comm="named" sig=11
>type=CRED_ACQ msg=audit(1188288757.240:83): user pid=4155 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=named : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188288757.242:84): user pid=4155 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=named : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188288757.243:85): user pid=4155 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=named : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188289184.296:86): user pid=4359 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=named : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188289184.299:87): user pid=4359 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=named : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188289184.299:88): user pid=4359 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=named : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188289252.130:89): user pid=3772 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188289252.138:90): user pid=3772 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188289258.080:91): user pid=4379 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_LOGIN msg=audit(1188289258.106:92): user pid=4379 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1188289260.734:93): user pid=4379 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188289260.734:94): user pid=4379 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188289260.736:95): login pid=4379 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188289260.874:96): user pid=4379 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188289260.894:97): user pid=4379 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188289260.894:98): user pid=4379 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188289260.896:99): user pid=4379 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188289269.485:100): user pid=4379 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188289269.488:101): user pid=4379 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188291661.949:102): user pid=31153 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188295262.094:103): user pid=897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188298861.672:104): user pid=1057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188302461.862:105): user pid=1217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188306061.059:106): user pid=1411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188309661.241:107): user pid=1578 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188313261.267:108): user pid=1740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188316861.287:109): user pid=1900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188320461.313:110): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188323602.291:111): user pid=3169 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1188323602.291:112): user pid=3167 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1188323602.299:113): user pid=3169 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1188323602.303:114): user pid=3167 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1188323604.190:115): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2898 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1188323613.820:6529) auditd normal halt, sending auid=4294967295 pid=2805 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2179
>type=DAEMON_START msg=audit(1188323746.541:7579) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2112 res=success, auditd pid=2112
>type=CONFIG_CHANGE msg=audit(1188323747.201:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188323747.201:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188323747.234:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188323747.234:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1188323768.768:9): user pid=2980 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188323791.886:10): user pid=3074 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188323791.890:11): user pid=3074 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188323791.890:12): user pid=3074 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188323791.895:13): login pid=3074 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188323791.915:14): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188323791.918:15): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1188323875.784:16): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188323875.785:17): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188323891.427:18): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188323891.431:19): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188323891.431:20): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188323891.440:21): login pid=3074 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1188323891.459:22): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188323891.460:23): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188324061.462:24): user pid=3760 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188325093.368:25): user pid=3893 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188325093.368:26): user pid=3893 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188325093.501:27): user pid=3893 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1188325131.493:28): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2840 comm="hald-addon-acpi" sig=11
>type=USER_END msg=audit(1188325436.120:29): user pid=3893 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188326657.129:30): user pid=4063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188326657.129:31): user pid=4063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188326657.143:32): user pid=4063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188327661.733:33): user pid=4179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188329972.821:34): user pid=4063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188329991.977:35): user pid=4507 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188329991.978:36): user pid=4507 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188330017.640:37): user pid=4510 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188330024.148:38): user pid=4511 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188330024.148:39): user pid=4511 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188330024.162:40): user pid=4511 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188330024.162:41): user pid=4511 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188330031.204:42): user pid=4511 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188330031.204:43): user pid=4511 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188330049.499:44): user pid=4516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188330049.499:45): user pid=4516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188330049.506:46): user pid=4516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188330049.506:47): user pid=4516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188330050.882:48): user pid=4516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188330050.882:49): user pid=4516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188330058.018:50): user pid=4521 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188330058.018:51): user pid=4521 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188330058.038:52): user pid=4521 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188330058.038:53): user pid=4521 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188330190.564:54): user pid=4521 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188330190.564:55): user pid=4521 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188330267.429:56): user pid=17202 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188330267.429:57): user pid=17202 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188330267.442:58): user pid=17202 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188330267.442:59): user pid=17202 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188330279.069:60): user pid=17202 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188330279.069:61): user pid=17202 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188330914.323:62): user pid=10016 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188330916.608:63): user pid=10017 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188330916.609:64): user pid=10017 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188330916.624:65): user pid=10017 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188330916.625:66): user pid=10017 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188331001.143:67): user pid=10063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188331001.143:68): user pid=10063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188331001.156:69): user pid=10063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188331261.142:70): user pid=11310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188331324.041:71): user pid=10063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188331324.196:72): user pid=10017 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188331324.197:73): user pid=10017 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188331324.636:74): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188331324.637:75): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188331326.968:76): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2671 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1188331339.116:7580) auditd normal halt, sending auid=4294967295 pid=11912 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2112
>type=DAEMON_START msg=audit(1188331429.186:1180) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2116 res=success, auditd pid=2116
>type=CONFIG_CHANGE msg=audit(1188331429.286:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188331429.286:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188331429.297:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188331429.297:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1188331452.103:9): user pid=2984 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188331454.777:10): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2848 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188331477.513:11): user pid=3079 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188331477.517:12): user pid=3079 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188331477.517:13): user pid=3079 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188331477.522:14): login pid=3079 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188331477.540:15): user pid=3079 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188331477.540:16): user pid=3079 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188331554.388:17): user pid=3582 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188331559.474:18): user pid=3582 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188331572.480:19): user pid=3582 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188331602.887:20): user pid=3590 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188331602.887:21): user pid=3590 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188331602.971:22): user pid=3590 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188331631.625:23): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188331631.625:24): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188331631.643:25): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188331631.643:26): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188331645.414:27): user pid=3590 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188331650.348:28): user pid=3635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188331650.348:29): user pid=3635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188331650.357:30): user pid=3635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188331688.886:31): user pid=3635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188331857.141:32): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188331857.141:33): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188332064.558:34): user pid=4031 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188332064.558:35): user pid=4031 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188332064.571:36): user pid=4031 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188332064.571:37): user pid=4031 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188332070.787:38): user pid=4031 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188332070.787:39): user pid=4031 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188332091.448:40): user pid=4069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188332091.448:41): user pid=4069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188332091.456:42): user pid=4069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188332091.456:43): user pid=4069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188332091.688:44): user pid=4069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188332091.689:45): user pid=4069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188332161.753:46): user pid=4193 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188332161.754:47): user pid=4193 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188332161.768:48): user pid=4193 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188332767.065:49): user pid=9307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188332767.066:50): user pid=9307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188332767.198:51): user pid=9307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188332767.208:52): user pid=9307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188332780.758:53): user pid=4193 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188333099.839:54): user pid=9307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188333099.840:55): user pid=9307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188334451.365:56): user pid=6910 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188334451.365:57): user pid=6910 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188334451.378:58): user pid=6910 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188334451.379:59): user pid=6910 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188334463.239:60): user pid=6910 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188334463.240:61): user pid=6910 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188334862.051:62): user pid=6969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188335616.741:63): user pid=7179 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188335616.741:64): user pid=7179 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188335616.755:65): user pid=7179 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188336219.425:66): user pid=15867 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188336221.884:67): user pid=15868 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188336221.884:68): user pid=15868 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188336221.903:69): user pid=15868 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188336221.903:70): user pid=15868 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188336398.133:71): user pid=15868 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188336398.133:72): user pid=15868 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188336755.188:73): user pid=16007 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188336755.189:74): user pid=16007 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188336755.206:75): user pid=16007 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188336755.206:76): user pid=16007 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188336896.573:77): user pid=16007 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188336896.573:78): user pid=16007 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188336920.102:79): user pid=16082 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_END msg=audit(1188336922.205:80): user pid=7179 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188336925.747:81): user pid=16082 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188336928.132:82): user pid=16082 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188336932.323:83): user pid=16086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188336932.323:84): user pid=16086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188336932.339:85): user pid=16086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188336932.340:86): user pid=16086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188336937.099:87): user pid=16086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188336937.100:88): user pid=16086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188337131.213:89): user pid=16164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188337131.214:90): user pid=16164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188337131.232:91): user pid=16164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188337131.232:92): user pid=16164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188337176.677:93): user pid=16164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188337176.678:94): user pid=16164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188337302.125:95): user pid=4943 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188337302.126:96): user pid=4943 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188337302.383:97): user pid=4943 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188337302.401:98): user pid=4943 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_ABEND msg=audit(1188337461.037:99): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2699 comm="dhcdbd" sig=6
>type=CRED_DISP msg=audit(1188337578.327:100): user pid=4943 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188337579.284:101): user pid=4943 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=DAEMON_START msg=audit(1188337713.942:6928) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2144 res=success, auditd pid=2144
>type=CONFIG_CHANGE msg=audit(1188337714.042:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188337714.042:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188337714.053:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188337714.053:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1188337735.881:9): user pid=3012 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188337750.688:10): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188337750.691:11): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188337750.692:12): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188337750.697:13): login pid=3107 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188337750.705:14): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188337750.706:15): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188337806.446:16): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2885 comm="hald-addon-acpi" sig=11
>type=USER_ACCT msg=audit(1188338461.902:17): user pid=3834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1188339310.210:18): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3871 comm="telepathy-idle" sig=6
>type=USER_AUTH msg=audit(1188339450.652:19): user pid=4029 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188339450.653:20): user pid=4029 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188339450.720:21): user pid=4029 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188339450.721:22): user pid=4029 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188340060.811:23): user pid=4110 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188340060.812:24): user pid=4110 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188340060.873:25): user pid=4110 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188340166.473:26): user pid=4029 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188340166.474:27): user pid=4029 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188342061.972:28): user pid=4869 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188342221.788:29): user pid=4907 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188342221.789:30): user pid=4907 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188342221.806:31): user pid=4907 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188342221.807:32): user pid=4907 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188342229.940:33): user pid=4110 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188342280.429:34): user pid=4907 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188342280.430:35): user pid=4907 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188342469.235:36): user pid=4977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188342469.235:37): user pid=4977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188342469.249:38): user pid=4977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188343943.292:39): user pid=4977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188344950.803:40): user pid=5747 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188344950.803:41): user pid=5747 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188344950.814:42): user pid=5747 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188344983.340:43): user pid=5747 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188345000.017:44): user pid=5810 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188345000.018:45): user pid=5810 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188345000.035:46): user pid=5810 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188345000.035:47): user pid=5810 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188345117.404:48): user pid=5857 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188345117.404:49): user pid=5857 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188345117.425:50): user pid=5857 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188345135.942:51): user pid=5857 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188345283.780:52): user pid=5810 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188345283.780:53): user pid=5810 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188345661.008:54): user pid=6011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188346444.694:55): user pid=6139 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188346444.694:56): user pid=6139 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188346444.715:57): user pid=6139 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188346482.700:58): user pid=6139 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188346701.065:59): user pid=6322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188346701.066:60): user pid=6322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188346701.130:61): user pid=6322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188346701.130:62): user pid=6322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188346748.331:63): user pid=6322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188346748.331:64): user pid=6322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188346933.959:65): user pid=6418 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188346933.960:66): user pid=6418 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188346933.975:67): user pid=6418 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188346933.976:68): user pid=6418 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188346938.817:69): user pid=6452 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188346938.818:70): user pid=6452 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188346938.835:71): user pid=6452 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188346950.672:72): user pid=6452 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188348333.827:73): user pid=6418 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188348333.828:74): user pid=6418 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188349261.117:75): user pid=6623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1188349584.499:76): user pid=6838 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1188371444.960:77): user pid=6966 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1188371809.499:78): user pid=7584 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1188376768.074:79): user pid=7697 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188376835.086:80): user pid=7900 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188376835.086:81): user pid=7900 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188376835.240:82): user pid=7900 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188376835.241:83): user pid=7900 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188376916.539:84): user pid=7900 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188376916.540:85): user pid=7900 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188377158.333:86): user pid=8145 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1188377185.135:87): user pid=8146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188377185.136:88): user pid=8146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1188377200.098:89): user pid=8150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188377200.098:90): user pid=8150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188377200.105:91): user pid=8150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188377200.106:92): user pid=8150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1188377211.016:93): user pid=8150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188377211.017:94): user pid=8150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188378061.455:95): user pid=8578 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188379546.390:96): user pid=8787 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188379546.390:97): user pid=8787 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188379546.406:98): user pid=8787 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188379546.406:99): user pid=8787 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1188379553.370:100): user pid=8787 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188379553.371:101): user pid=8787 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1188379656.556:102): user pid=8834 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188379656.556:103): user pid=8834 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188379656.571:104): user pid=8834 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188379656.571:105): user pid=8834 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1188379676.076:106): user pid=8834 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188379676.076:107): user pid=8834 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1188380619.332:108): user pid=9134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188380619.332:109): user pid=9134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188380619.345:110): user pid=9134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188380619.346:111): user pid=9134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188380619.430:112): user pid=9134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188380619.430:113): user pid=9134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188380633.109:114): user pid=9140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188380633.110:115): user pid=9140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188380633.122:116): user pid=9140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188380633.122:117): user pid=9140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188380633.145:118): user pid=9140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188380633.146:119): user pid=9140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188381661.538:120): user pid=9325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188385261.784:121): user pid=10047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188388861.898:122): user pid=10569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188392462.263:123): user pid=11217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188396061.499:124): user pid=11866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188397340.780:125): user pid=12091 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188397340.780:126): user pid=12091 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188397340.976:127): user pid=12091 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188397340.986:128): user pid=12091 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1188397736.146:129): user pid=12185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188397736.146:130): user pid=12185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188397736.194:131): user pid=12185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188397754.436:132): user pid=12185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1188398847.499:133): user pid=12396 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1188454567.099:134): user pid=12518 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188457261.193:135): user pid=12903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188457638.149:136): user pid=12091 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188457638.185:137): user pid=12091 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USYS_CONFIG msg=audit(1188457930.499:138): user pid=13216 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1188461083.383:139): user pid=13392 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188463211.558:140): user pid=13917 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188463211.559:141): user pid=13917 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188463211.704:142): user pid=13917 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188463211.704:143): user pid=13917 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1188463899.710:144): user pid=13917 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188463899.711:145): user pid=13917 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188464461.445:146): user pid=14189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188468061.568:147): user pid=14775 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188469464.164:148): user pid=15149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188469464.165:149): user pid=15149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188469464.490:150): user pid=15149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188469464.523:151): user pid=15149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188470321.763:152): user pid=15149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188470321.803:153): user pid=15149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188470382.957:154): user pid=15305 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188470382.958:155): user pid=15305 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188470383.033:156): user pid=15305 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188470383.033:157): user pid=15305 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=MAC_POLICY_LOAD msg=audit(1188470388.341:158): policy loaded auid=500
>type=SYSCALL msg=audit(1188470388.341:158): arch=40000003 syscall=4 success=yes exit=1571370 a0=4 a1=b7da0000 a2=17fa2a a3=bffb73e8 items=0 ppid=15308 pid=15310 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1188470388.393:159): user pid=2309 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=CRED_DISP msg=audit(1188470390.004:160): user pid=15305 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188470390.005:161): user pid=15305 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188471661.845:162): user pid=15394 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188474082.968:163): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188474082.969:164): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188474087.507:165): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2705 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1188474096.000:6929) auditd normal halt, sending auid=4294967295 pid=16259 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2144
>type=DAEMON_START msg=audit(1188474334.303:1818) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2078 res=success, auditd pid=2078
>type=CONFIG_CHANGE msg=audit(1188474334.400:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1188474334.440:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1188474361.076:7): user pid=3231 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=DAEMON_START msg=audit(1188474700.403:1229) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2055 res=success, auditd pid=2055
>type=CONFIG_CHANGE msg=audit(1188474700.499:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1188474700.539:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=AVC msg=audit(1188474706.556:7): avc:  denied  { write } for  pid=2175 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188474706.556:7): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfdc4bd0 a2=63a494 a3=0 items=0 ppid=1 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188474726.623:8): user pid=3201 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=DAEMON_START msg=audit(1188474818.825:532) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2097 res=success, auditd pid=2097
>type=CONFIG_CHANGE msg=audit(1188474818.923:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1188474818.963:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=ANOM_PROMISCUOUS msg=audit(1188474846.215:7): dev=peth0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188474846.215:7): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=89a2 a2=bfa0a6f0 a3=1 items=0 ppid=3067 pid=3290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:xend_t:s0 key=(null)
>type=USER_AUTH msg=audit(1188474855.757:8): user pid=3546 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188474855.757:9): user pid=3546 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1188474855.761:10): login pid=3546 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188474855.869:11): user pid=3546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188474855.873:12): user pid=3546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1188474855.881:13): user pid=3546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1188474855.897:14): user pid=3546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1188474865.647:15): avc:  denied  { read write } for  pid=3665 comm="xenstored" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenstored_t:s0 tcontext=root:object_r:tty_device_t:s0 tclass=chr_file
>type=AVC msg=audit(1188474865.647:15): avc:  denied  { use } for  pid=3665 comm="xenstored" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenstored_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd
>type=SYSCALL msg=audit(1188474865.647:15): arch=40000003 syscall=11 success=yes exit=0 a0=9cef9d0 a1=9cef098 a2=9ceef00 a3=0 items=0 ppid=3664 pid=3665 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xenstored" exe="/usr/sbin/xenstored" subj=root:system_r:xenstored_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188474865.647:15):  path="/dev/tty1"
>type=AVC msg=audit(1188474865.655:16): avc:  denied  { read write } for  pid=3668 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=root:object_r:tty_device_t:s0 tclass=chr_file
>type=AVC msg=audit(1188474865.655:16): avc:  denied  { use } for  pid=3668 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1188474865.655:16): avc:  denied  { use } for  pid=3668 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1188474865.655:16): avc:  denied  { use } for  pid=3668 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd
>type=SYSCALL msg=audit(1188474865.655:16): arch=40000003 syscall=11 success=yes exit=0 a0=8a28df0 a1=8a1a250 a2=bfd07bb4 a3=87c7b50 items=0 ppid=3663 pid=3668 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xenconsoled" exe="/usr/sbin/xenconsoled" subj=root:system_r:xenconsoled_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188474865.655:16):  path="/dev/tty1"
>type=AVC_PATH msg=audit(1188474865.655:16):  path="/dev/tty1"
>type=AVC_PATH msg=audit(1188474865.655:16):  path="/dev/tty1"
>type=USER_AUTH msg=audit(1188474873.729:17): user pid=3547 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188474873.729:18): user pid=3547 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188474873.729:19): login pid=3547 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1188474873.881:20): user pid=3547 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188474873.885:21): user pid=3547 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188474873.885:22): user pid=3547 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188474873.969:23): user pid=3547 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1188475108.943:24): avc:  denied  { write } for  pid=4041 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275174 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188475108.943:24): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb07910 a2=63a494 a3=0 items=0 ppid=1 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188475112.948:25): user pid=4202 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=DAEMON_START msg=audit(1188475251.695:2789) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2105 res=success, auditd pid=2105
>type=CONFIG_CHANGE msg=audit(1188475251.793:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1188475251.833:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=ANOM_PROMISCUOUS msg=audit(1188475279.537:7): dev=peth0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188475279.537:7): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=89a2 a2=bfeaab90 a3=1 items=0 ppid=3081 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:xend_t:s0 key=(null)
>type=USER_AUTH msg=audit(1188475288.779:8): user pid=3560 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188475288.779:9): user pid=3560 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1188475288.783:10): login pid=3560 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188475288.915:11): user pid=3560 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188475288.923:12): user pid=3560 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1188475288.931:13): user pid=3560 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1188475288.947:14): user pid=3560 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1188475348.648:15): avc:  denied  { read write } for  pid=3670 comm="xenstored" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenstored_t:s0 tcontext=root:object_r:tty_device_t:s0 tclass=chr_file
>type=AVC msg=audit(1188475348.648:15): avc:  denied  { use } for  pid=3670 comm="xenstored" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenstored_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd
>type=SYSCALL msg=audit(1188475348.648:15): arch=40000003 syscall=11 success=yes exit=0 a0=8b67bf0 a1=8b67240 a2=8b66d58 a3=0 items=0 ppid=3669 pid=3670 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xenstored" exe="/usr/sbin/xenstored" subj=root:system_r:xenstored_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188475348.648:15):  path="/dev/tty1"
>type=AVC msg=audit(1188475348.668:16): avc:  denied  { read write } for  pid=3673 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=root:object_r:tty_device_t:s0 tclass=chr_file
>type=AVC msg=audit(1188475348.668:16): avc:  denied  { use } for  pid=3673 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1188475348.668:16): avc:  denied  { use } for  pid=3673 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1188475348.668:16): avc:  denied  { use } for  pid=3673 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd
>type=SYSCALL msg=audit(1188475348.668:16): arch=40000003 syscall=11 success=yes exit=0 a0=8ed2eb8 a1=8edbb88 a2=bfa8bdd4 a3=8c31a38 items=0 ppid=3668 pid=3673 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xenconsoled" exe="/usr/sbin/xenconsoled" subj=root:system_r:xenconsoled_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188475348.668:16):  path="/dev/tty1"
>type=AVC_PATH msg=audit(1188475348.668:16):  path="/dev/tty1"
>type=AVC_PATH msg=audit(1188475348.668:16):  path="/dev/tty1"
>type=USER_AUTH msg=audit(1188475388.348:17): user pid=3561 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188475388.348:18): user pid=3561 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188475388.352:19): login pid=3561 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188475388.440:20): user pid=3561 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188475388.444:21): user pid=3561 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188475388.444:22): user pid=3561 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188475388.444:23): user pid=3561 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188475526.802:24): user pid=3562 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1188475526.802:25): user pid=3562 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=LOGIN msg=audit(1188475526.806:26): login pid=3562 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1188475526.998:27): user pid=3562 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1188475527.006:28): user pid=3562 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1188475527.006:29): user pid=3562 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1188475527.094:30): user pid=3562 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1188475625.519:31): user pid=3561 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188475625.527:32): user pid=3561 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188475628.648:33): user pid=4026 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188475628.648:34): user pid=4026 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188475628.648:35): login pid=4026 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1188475628.736:36): user pid=4026 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188475628.740:37): user pid=4026 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188475628.744:38): user pid=4026 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188475628.744:39): user pid=4026 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188475868.847:40): user pid=3563 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1188475868.847:41): user pid=3563 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=LOGIN msg=audit(1188475868.847:42): login pid=3563 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1188475868.935:43): user pid=3563 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1188475868.939:44): user pid=3563 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1188475868.939:45): user pid=3563 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_LOGIN msg=audit(1188475868.939:46): user pid=3563 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_AUTH msg=audit(1188476233.989:47): user pid=3564 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_ACCT msg=audit(1188476233.989:48): user pid=3564 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=LOGIN msg=audit(1188476233.989:49): login pid=3564 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1188476234.077:50): user pid=3564 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_START msg=audit(1188476234.081:51): user pid=3564 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=CRED_ACQ msg=audit(1188476234.081:52): user pid=3564 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_LOGIN msg=audit(1188476234.081:53): user pid=3564 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=CRED_DISP msg=audit(1188477149.496:54): user pid=3560 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1188477149.500:55): user pid=3560 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1188477151.717:56): user pid=4528 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188477151.717:57): user pid=4528 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1188477151.717:58): login pid=4528 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1188477151.805:59): user pid=4528 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188477151.809:60): user pid=4528 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1188477151.809:61): user pid=4528 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1188477151.809:62): user pid=4528 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1188477181.803:63): user pid=4743 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188477181.803:64): user pid=4743 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188477181.819:65): user pid=4743 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1188477181.819:66): user pid=4743 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1188477186.952:67): user pid=4743 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1188477186.952:68): user pid=4743 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1188477259.896:69): user pid=3565 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1188477259.896:70): user pid=3565 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=LOGIN msg=audit(1188477259.896:71): login pid=3565 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1188477259.988:72): user pid=3565 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1188477259.992:73): user pid=3565 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1188477259.992:74): user pid=3565 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1188477259.992:75): user pid=3565 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1188477287.438:76): user pid=4528 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1188477287.438:77): user pid=4528 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1188477290.474:78): user pid=4858 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188477290.474:79): user pid=4858 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1188477290.474:80): login pid=4858 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188477290.562:81): user pid=4858 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188477290.566:82): user pid=4858 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1188477290.566:83): user pid=4858 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1188477290.566:84): user pid=4858 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1188477306.542:85): user pid=4858 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1188477306.546:86): user pid=4858 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1188477409.676:87): user pid=3562 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1188477409.676:88): user pid=3562 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1188477412.944:89): user pid=3563 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1188477412.948:90): user pid=3563 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_DISP msg=audit(1188477414.689:91): user pid=3564 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_END msg=audit(1188477414.689:92): user pid=3564 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_AUTH msg=audit(1188477432.817:93): user pid=4900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188477432.817:94): user pid=4900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1188477432.817:95): login pid=4900 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1188477432.901:96): user pid=4900 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188477432.905:97): user pid=4900 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1188477432.909:98): user pid=4900 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1188477432.909:99): user pid=4900 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1188477555.835:100): user pid=4026 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188477555.839:101): user pid=4026 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188477560.092:102): user pid=3565 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1188477560.096:103): user pid=3565 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1188477563.773:104): user pid=4900 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1188477563.789:105): user pid=4900 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1188477577.364:106): user pid=5111 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188477577.364:107): user pid=5111 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1188477577.364:108): login pid=5111 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188477577.456:109): user pid=5111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188477577.460:110): user pid=5111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1188477577.460:111): user pid=5111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1188477577.460:112): user pid=5111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1188477600.000:113): avc:  denied  { write } for  pid=5279 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275174 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188477600.000:113): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfacd8e0 a2=2f4494 a3=0 items=0 ppid=1 pid=5279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188477603.145:114): user pid=5440 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188477614.908:115): user pid=5472 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188477614.912:116): user pid=5472 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188477614.912:117): user pid=5472 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188477614.916:118): login pid=5472 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188477614.928:119): user pid=5472 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188477614.932:120): user pid=5472 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188477661.237:121): user pid=5872 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188477661.237:122): user pid=5872 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188477661.265:123): user pid=5872 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188477661.265:124): user pid=5872 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188478861.586:125): user pid=6153 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188478919.066:126): user pid=6163 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188478919.070:127): user pid=6163 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188478919.126:128): user pid=6163 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188479218.074:129): user pid=6163 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188480067.623:130): dev=vif3.0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188480067.623:130): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=89a2 a2=bfa73ea0 a3=1 items=0 ppid=6967 pid=7052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1188480398.858:131): user pid=5872 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188480398.858:132): user pid=5872 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188480431.001:133): user pid=7130 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188480431.001:134): user pid=7130 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188480431.093:135): user pid=7130 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188480431.093:136): user pid=7130 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188480445.224:137): dev=vif3.0 prom=0 old_prom=256 auid=4294967295
>type=DAEMON_START msg=audit(1188480689.848:6947) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2122 res=success, auditd pid=2122
>type=CONFIG_CHANGE msg=audit(1188480689.945:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1188480689.985:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1188480714.857:7): user pid=3284 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188480727.584:8): user pid=3366 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188480727.584:9): user pid=3366 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188480727.588:10): user pid=3366 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188480727.588:11): login pid=3366 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188480727.604:12): user pid=3366 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188480727.604:13): user pid=3366 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188480820.275:14): user pid=3929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188480820.275:15): user pid=3929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188480820.331:16): user pid=3929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188480820.331:17): user pid=3929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188481026.523:18): user pid=4007 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188481026.523:19): user pid=4007 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188481026.547:20): user pid=4007 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188481086.460:21): user pid=4007 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188481222.217:22): user pid=4181 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188481222.221:23): user pid=4181 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188481222.229:24): user pid=4181 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188481249.863:25): user pid=4181 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188481383.560:26): user pid=4315 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_AUTH msg=audit(1188481387.993:27): user pid=4316 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188481387.993:28): user pid=4316 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188481388.005:29): user pid=4316 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188481388.005:30): user pid=4316 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188481548.919:31): user pid=4434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188481548.919:32): user pid=4434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188481548.927:33): user pid=4434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188481567.335:34): user pid=4434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188481808.150:35): user pid=4522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188481808.150:36): user pid=4522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188481808.158:37): user pid=4522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188481822.361:38): user pid=3929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188481822.361:39): user pid=3929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188481868.455:40): user pid=4522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188481981.047:41): dev=vif1.0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188481981.047:41): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=89a2 a2=bfc8b8b0 a3=1 items=0 ppid=4586 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1188482248.500:42): user pid=5188 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188482248.500:43): user pid=5188 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1188482248.736:44): user pid=5188 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1188482248.752:45): user pid=5188 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1188482363.145:46): user pid=5188 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1188482363.145:47): user pid=5188 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1188482370.102:48): user pid=5301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188482370.102:49): user pid=5301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1188482370.114:50): user pid=5301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1188482370.114:51): user pid=5301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188482461.478:52): user pid=5340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188482775.237:53): dev=vif1.0 prom=0 old_prom=256 auid=4294967295
>type=DAEMON_START msg=audit(1188482890.219:8618) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2136 res=success, auditd pid=2136
>type=CONFIG_CHANGE msg=audit(1188482890.316:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1188482890.356:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_AUTH msg=audit(1188482955.525:7): user pid=3184 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188482955.525:8): user pid=3184 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1188482955.529:9): login pid=3184 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188482955.649:10): user pid=3184 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188482955.661:11): user pid=3184 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1188482955.673:12): user pid=3184 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1188482955.673:13): user pid=3184 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1188482974.597:14): avc:  denied  { write } for  pid=3385 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275174 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188482974.597:14): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfe964a0 a2=1c5494 a3=0 items=0 ppid=1 pid=3385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188482978.586:15): user pid=3561 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188482993.965:16): user pid=3593 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188482993.969:17): user pid=3593 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188482993.969:18): user pid=3593 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188482993.973:19): login pid=3593 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188482993.989:20): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188482993.989:21): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1188483030.421:22): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188483030.425:23): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188483038.382:24): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188483038.390:25): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188483038.390:26): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188483038.430:27): login pid=3593 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1188483038.442:28): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188483038.442:29): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=DAEMON_START msg=audit(1188483181.860:3371) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2128 res=success, auditd pid=2128
>type=CONFIG_CHANGE msg=audit(1188483181.959:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1188483181.995:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=AVC msg=audit(1188483187.191:7): avc:  denied  { write } for  pid=2248 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188483187.191:7): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfec9cd0 a2=63a494 a3=0 items=0 ppid=1 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188483206.355:8): user pid=3237 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188483226.975:9): user pid=3319 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188483226.975:10): user pid=3319 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188483226.975:11): user pid=3319 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188483226.979:12): login pid=3319 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188483226.995:13): user pid=3319 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188483226.995:14): user pid=3319 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=DAEMON_START msg=audit(1188483416.942:2492) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2203 res=success, auditd pid=2203
>type=CONFIG_CHANGE msg=audit(1188483417.042:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188483417.042:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188483417.079:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188483417.079:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188483423.526:9): avc:  denied  { write } for  pid=2288 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275175 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188483423.526:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf883690 a2=63a494 a3=0 items=0 ppid=1 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188483436.623:10): user pid=3053 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188483443.788:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2905 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188483460.192:12): user pid=3044 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1188483460.225:13): user pid=3044 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1188483463.371:14): user pid=3044 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188483463.371:15): user pid=3044 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1188483463.375:16): login pid=3044 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188483463.682:17): user pid=3044 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188483463.693:18): user pid=3044 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1188483463.694:19): user pid=3044 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1188483463.710:20): user pid=3044 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1188483482.450:21): user pid=3229 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188483482.450:22): user pid=3229 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188483482.490:23): user pid=3229 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1188483485.871:24): avc:  denied  { read write } for  pid=3255 comm="modprobe" name="Xorg.setup.log" dev=dm-0 ino=1275246 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1188483485.871:24): arch=40000003 syscall=11 success=yes exit=0 a0=bf99be78 a1=bf99ae38 a2=bf99c894 a3=400 items=0 ppid=3232 pid=3255 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty9 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188483485.871:24):  path="/var/log/Xorg.setup.log"
>type=USER_END msg=audit(1188483575.609:25): user pid=3229 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188483606.822:26): user pid=3274 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188483606.822:27): user pid=3274 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188483606.823:28): user pid=3274 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1188483851.913:29): user pid=3274 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1188484454.738:1326) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2194 res=success, auditd pid=2194
>type=CONFIG_CHANGE msg=audit(1188484454.860:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188484454.860:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188484454.897:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188484454.897:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188484461.266:9): avc:  denied  { write } for  pid=2279 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275175 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188484461.266:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa97fa0 a2=63a494 a3=0 items=0 ppid=1 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188484475.840:10): user pid=3039 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188484481.352:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2909 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188484510.342:12): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188484510.346:13): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188484510.346:14): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188484510.351:15): login pid=3142 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188484510.370:16): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188484510.372:17): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188484638.700:18): user pid=3516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188484638.700:19): user pid=3516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188484638.793:20): user pid=3516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188484828.384:21): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188484828.384:22): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188484828.398:23): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188484828.398:24): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188484868.292:25): user pid=3559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188484868.292:26): user pid=3559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188484868.303:27): user pid=3559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188485003.097:28): user pid=3559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188485021.336:29): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188485021.337:30): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188485087.523:31): user pid=3516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188485210.654:32): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188485210.655:33): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188485238.096:34): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188485238.099:35): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188485238.100:36): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188485238.108:37): login pid=3142 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1188485238.190:38): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188485238.191:39): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1188485647.814:40): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188485647.815:41): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188485659.284:42): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188485659.287:43): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188485659.288:44): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188485659.294:45): login pid=3142 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1188485659.313:46): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188485659.315:47): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188486061.877:48): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188486307.321:49): user pid=4717 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188486307.322:50): user pid=4717 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188486307.338:51): user pid=4717 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188486307.339:52): user pid=4717 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188486743.726:53): user pid=4717 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188486743.727:54): user pid=4717 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188486880.039:55): user pid=4927 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188486880.040:56): user pid=4927 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188486880.051:57): user pid=4927 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188487194.382:58): user pid=4927 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188488080.888:59): user pid=5124 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188488080.888:60): user pid=5124 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188488080.903:61): user pid=5124 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188488777.509:62): user pid=5192 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188488777.509:63): user pid=5192 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188488777.719:64): user pid=5192 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188488777.720:65): user pid=5192 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=DAEMON_END msg=audit(1188489318.568:1327) auditd normal halt, sending auid=500 pid=5616 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2194
>type=DAEMON_START msg=audit(1188489318.846:6846): auditd start, ver=1.5.6, format=raw, auid=500 pid=5632 res=success, auditd pid=5632
>type=CONFIG_CHANGE msg=audit(1188489318.946:69): audit_enabled=1 old=1 by auid=500 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188489318.946:70): audit_enabled=1 old=1 by auid=500 res=1
>type=CONFIG_CHANGE msg=audit(1188489318.949:71): audit_backlog_limit=320 old=320 by auid=500 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188489318.949:72): audit_backlog_limit=320 old=320 by auid=500 res=1
>type=USER_END msg=audit(1188489372.492:73): user pid=5124 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188489445.840:74): user pid=5755 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188489445.840:75): user pid=5755 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188489445.915:76): user pid=5755 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1188489548.722:77): user pid=5771 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=mailnull exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1188489548.726:78): user pid=5772 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=smmsp exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_END msg=audit(1188489560.178:79): user pid=5755 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188489565.282:80): user pid=5192 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188489565.283:81): user pid=5192 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188489661.105:82): user pid=5917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188490071.373:83): user pid=6004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188490071.374:84): user pid=6004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188490071.390:85): user pid=6004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188490071.391:86): user pid=6004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188491146.657:87): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188491146.657:87): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf9c5aa8 a3=6 items=0 ppid=1 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1188491150.419:88): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1188491315.113:89): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188491315.113:89): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf9c5aa8 a3=6 items=0 ppid=1 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USYS_CONFIG msg=audit(1188491789.499:90): user pid=6480 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1188492599.587:1620): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2199 res=success, auditd pid=2199
>type=CONFIG_CHANGE msg=audit(1188492599.687:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188492599.687:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188492599.707:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188492599.707:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188492605.254:9): avc:  denied  { write } for  pid=2284 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188492605.254:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8966a0 a2=63a494 a3=0 items=0 ppid=1 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1188492619.131:10): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2992 comm="hald-addon-acpi" sig=11
>type=USER_ERR msg=audit(1188492619.391:11): user pid=3119 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188492632.137:12): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188492632.141:13): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188492632.142:14): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188492632.146:15): login pid=3214 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188492632.167:16): user pid=3214 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188492632.169:17): user pid=3214 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188493262.038:18): user pid=3755 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1188493550.499:19): user pid=3934 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1188539494.285:1286): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2207 res=success, auditd pid=2207
>type=CONFIG_CHANGE msg=audit(1188539494.385:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188539494.385:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188539494.403:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188539494.403:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188539500.029:9): avc:  denied  { write } for  pid=2292 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188539500.029:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfc72a80 a2=63a494 a3=0 items=0 ppid=1 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188539514.120:10): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188539541.984:11): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188539541.987:12): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188539541.988:13): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188539541.992:14): login pid=3222 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188539542.012:15): user pid=3222 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188539542.014:16): user pid=3222 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188539664.051:17): user pid=3724 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1188540061.488:18): user pid=3859 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1188540924.500:19): user pid=4304 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1188541151.608:4468): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2199 res=success, auditd pid=2199
>type=CONFIG_CHANGE msg=audit(1188541151.707:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188541151.707:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188541151.718:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188541151.718:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188541157.257:9): avc:  denied  { write } for  pid=2284 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188541157.257:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfd0cb20 a2=63a494 a3=0 items=0 ppid=1 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1188541167.132:10): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2991 comm="hald-addon-acpi" sig=11
>type=USER_ERR msg=audit(1188541171.501:11): user pid=3119 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188541193.750:12): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2834 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1188541197.779:4469): auditd normal halt, sending auid=4294967295 pid=4132 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2199
>type=DAEMON_START msg=audit(1188547558.594:7928): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2176 res=success, auditd pid=2176
>type=CONFIG_CHANGE msg=audit(1188547558.694:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188547558.694:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188547558.701:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188547558.701:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188547564.666:9): avc:  denied  { write } for  pid=2261 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188547564.666:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfe57c60 a2=63a494 a3=0 items=0 ppid=1 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188547580.362:10): user pid=3096 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188547653.622:11): user pid=3191 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188547653.625:12): user pid=3191 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188547653.626:13): user pid=3191 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188547653.631:14): login pid=3191 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188547653.652:15): user pid=3191 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188547653.653:16): user pid=3191 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188548414.757:17): user pid=3881 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188548414.757:18): user pid=3881 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188548414.841:19): user pid=3881 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188548425.325:20): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188548425.325:20): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8b19a8 a3=6 items=0 ppid=1 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1188548426.561:21): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=3892 comm="qemu-kvm" sig=6
>type=ANOM_PROMISCUOUS msg=audit(1188548426.597:22): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1188548429.468:23): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188548429.468:23): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8b19a8 a3=6 items=0 ppid=1 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1188548430.299:24): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=3938 comm="qemu-kvm" sig=6
>type=ANOM_PROMISCUOUS msg=audit(1188548430.335:25): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1188548497.647:26): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188548497.647:26): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8b1998 a3=6 items=0 ppid=1 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1188548653.521:27): dev=vnet1 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188548653.521:27): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8b1998 a3=6 items=0 ppid=1 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1188548710.654:28): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1188548711.285:29): dev=vnet1 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1188548768.950:30): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188548768.950:30): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8b1998 a3=6 items=0 ppid=1 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_END msg=audit(1188548865.437:31): user pid=3881 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188548898.782:32): user pid=3191 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188548898.798:33): user pid=3191 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188548928.795:34): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2811 comm="dhcdbd" sig=6
>type=ANOM_PROMISCUOUS msg=audit(1188548933.386:35): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=DAEMON_END msg=audit(1188548944.395:7929): auditd normal halt, sending auid=4294967295 pid=5202 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2176
>type=DAEMON_START msg=audit(1188549173.761:3456): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2210 res=success, auditd pid=2210
>type=CONFIG_CHANGE msg=audit(1188549173.861:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188549173.861:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188549173.872:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188549173.872:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188549179.895:9): avc:  denied  { write } for  pid=2295 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188549179.895:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfae2220 a2=63a494 a3=0 items=0 ppid=1 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188549195.239:10): user pid=3130 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188549296.342:11): user pid=3225 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188549296.345:12): user pid=3225 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188549296.346:13): user pid=3225 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188549296.350:14): login pid=3225 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188549296.393:15): user pid=3225 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188549296.395:16): user pid=3225 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188549347.429:17): user pid=3607 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188549347.430:18): user pid=3607 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188549347.522:19): user pid=3607 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188549409.930:20): user pid=3607 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188549459.037:21): user pid=3758 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188549459.037:22): user pid=3758 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188549459.044:23): user pid=3758 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188549459.044:24): user pid=3758 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188549537.183:25): user pid=3954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188549537.183:26): user pid=3954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188549537.208:27): user pid=3954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188549552.077:28): user pid=3954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188549554.163:29): user pid=3973 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188549554.163:30): user pid=3973 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188549554.167:31): user pid=3973 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188549613.704:32): dev=vnet0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1188549613.704:32): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff0aae8 a3=6 items=0 ppid=1 pid=3845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null)
>type=USER_ACCT msg=audit(1188550862.443:33): user pid=5038 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188551240.148:34): user pid=5410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188551240.148:35): user pid=5410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1188551240.738:36): user pid=5410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1188551240.799:37): user pid=5410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188551301.622:38): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1188551425.065:39): dev=vnet0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1188551425.065:39): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff0aaf8 a3=6 items=0 ppid=1 pid=3845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1188551429.353:40): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1188551450.364:41): dev=vnet0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1188551450.364:41): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff0aaf8 a3=6 items=0 ppid=1 pid=3845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1188551776.713:42): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_ACCT msg=audit(1188554461.212:43): user pid=5145 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188555744.945:44): user pid=5297 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188555744.945:45): user pid=5297 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1188555745.045:46): user pid=5297 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1188555756.685:47): user pid=5297 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188555816.660:48): user pid=5308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188555816.660:49): user pid=5308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1188555816.665:50): user pid=5308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1188555820.395:51): user pid=5308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188555828.429:52): user pid=5410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1188555828.439:53): user pid=5410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1188555830.253:54): user pid=3758 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188555830.255:55): user pid=3758 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188555840.709:56): user pid=5347 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188555840.709:57): user pid=5347 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188555840.725:58): user pid=5347 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188555840.726:59): user pid=5347 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1188555854.542:60): avc:  denied  { getattr } for  pid=5389 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:insmod_t:s0 tcontext=root:object_r:user_home_dir_t:s0 tclass=dir
>type=SYSCALL msg=audit(1188555854.542:60): arch=40000003 syscall=195 success=no exit=-13 a0=99e7618 a1=bf8af890 a2=816ff4 a3=bf8af890 items=0 ppid=5388 pid=5389 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="sh" exe="/bin/bash" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188555854.542:60):  path="/root"
>type=AVC msg=audit(1188555854.542:61): avc:  denied  { search } for  pid=5389 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:insmod_t:s0 tcontext=root:object_r:user_home_dir_t:s0 tclass=dir
>type=SYSCALL msg=audit(1188555854.542:61): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8af8a8 a2=816ff4 a3=0 items=0 ppid=5388 pid=5389 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="sh" exe="/bin/bash" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=CRED_DISP msg=audit(1188555865.581:62): user pid=5347 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188555865.582:63): user pid=5347 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188556595.435:64): user pid=5452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188556595.436:65): user pid=5452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188556595.448:66): user pid=5452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188556595.448:67): user pid=5452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188556609.978:68): user pid=5476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188556609.979:69): user pid=5476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188556609.983:70): user pid=5476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188556610.274:71): user pid=5476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188556618.531:72): user pid=5452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188556618.532:73): user pid=5452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188556669.659:74): user pid=3225 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188556669.659:75): user pid=3225 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188556674.019:76): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2845 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1188556685.476:3457): auditd normal halt, sending auid=4294967295 pid=6314 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2210
>type=DAEMON_START msg=audit(1188556768.621:4747): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1903 res=success, auditd pid=1903
>type=CONFIG_CHANGE msg=audit(1188556768.721:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188556768.721:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188556769.062:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188556769.062:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188556775.663:9): avc:  denied  { write } for  pid=1989 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275162 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188556775.663:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfef5d00 a2=63a494 a3=0 items=0 ppid=1 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188556791.311:10): user pid=2815 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188556791.534:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2701 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188556815.177:12): user pid=2919 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188556815.179:13): user pid=2919 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188556815.179:14): user pid=2919 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188556815.181:15): login pid=2919 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188556815.189:16): user pid=2919 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188556815.190:17): user pid=2919 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188556884.019:18): user pid=3287 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188556884.019:19): user pid=3287 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188556884.133:20): user pid=3287 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188556884.134:21): user pid=3287 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188556889.684:22): user pid=3312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188556889.684:23): user pid=3312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188556889.763:24): user pid=3312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188556898.424:25): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188556898.424:25): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfdfc308 a3=6 items=0 ppid=1 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_END msg=audit(1188556917.743:26): user pid=3312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188556925.337:27): user pid=3360 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188556925.337:28): user pid=3360 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188556925.406:29): user pid=3360 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188557020.293:30): user pid=3375 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188557020.293:31): user pid=3375 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188557020.528:32): user pid=3375 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188557022.750:33): user pid=3287 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188557022.751:34): user pid=3287 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188557054.547:35): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188557054.548:36): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188557054.560:37): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188557054.561:38): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188557121.096:39): user pid=3375 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188557141.218:40): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1188557148.516:41): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188557148.517:42): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188557148.581:43): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188557158.095:44): dev=vnet0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1188557158.095:44): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff9a408 a3=6 items=0 ppid=1 pid=3473 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null)
>type=CRED_DISP msg=audit(1188557808.559:45): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188557808.587:46): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188558061.938:47): user pid=4247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188558120.213:48): user pid=4258 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188558120.213:49): user pid=4258 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188558120.459:50): user pid=4258 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188558120.472:51): user pid=4258 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1188558164.186:52): avc:  denied  { read write } for  pid=4577 comm="modprobe" name="" dev=sockfs ino=54153 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188558164.186:52): avc:  denied  { read write } for  pid=4577 comm="modprobe" name="" dev=sockfs ino=54154 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188558164.186:52): arch=40000003 syscall=11 success=yes exit=0 a0=9d6ae08 a1=bf903ec8 a2=bf9067a0 a3=9d6ae08 items=0 ppid=4576 pid=4577 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188558164.186:52):  path="socket:[54154]"
>type=AVC_PATH msg=audit(1188558164.186:52):  path="socket:[54153]"
>type=AVC msg=audit(1188558164.272:53): avc:  denied  { write } for  pid=4583 comm="modprobe" name="iptables.qb4580" dev=dm-0 ino=6044358 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:object_r:initrc_tmp_t:s0 tclass=file
>type=AVC msg=audit(1188558164.272:53): avc:  denied  { read } for  pid=4583 comm="modprobe" name="ip_tables_names" dev=proc ino=-268435041 scontext=user_u:system_r:insmod_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
>type=AVC msg=audit(1188558164.272:53): avc:  denied  { read write } for  pid=4583 comm="modprobe" name="" dev=sockfs ino=54179 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188558164.272:53): avc:  denied  { read write } for  pid=4583 comm="modprobe" name="" dev=sockfs ino=54180 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188558164.272:53): arch=40000003 syscall=11 success=yes exit=0 a0=982cf68 a1=bff3cad8 a2=bff3d21c a3=982cf68 items=0 ppid=4582 pid=4583 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188558164.272:53):  path="socket:[54180]"
>type=AVC_PATH msg=audit(1188558164.272:53):  path="socket:[54179]"
>type=AVC_PATH msg=audit(1188558164.272:53):  path="/proc/net/ip_tables_names"
>type=AVC_PATH msg=audit(1188558164.272:53):  path="/tmp/iptables.qb4580"
>type=AVC msg=audit(1188558281.632:54): avc:  denied  { read write } for  pid=4641 comm="modprobe" name="" dev=sockfs ino=57772 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188558281.632:54): avc:  denied  { read write } for  pid=4641 comm="modprobe" name="" dev=sockfs ino=57773 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188558281.632:54): arch=40000003 syscall=11 success=yes exit=0 a0=8354e08 a1=bfabb088 a2=bfabd960 a3=8354e08 items=0 ppid=4640 pid=4641 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188558281.632:54):  path="socket:[57773]"
>type=AVC_PATH msg=audit(1188558281.632:54):  path="socket:[57772]"
>type=AVC msg=audit(1188558282.159:55): avc:  denied  { read write } for  pid=4911 comm="modprobe" name="" dev=sockfs ino=58076 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188558282.159:55): avc:  denied  { read write } for  pid=4911 comm="modprobe" name="" dev=sockfs ino=58077 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188558282.159:55): arch=40000003 syscall=11 success=yes exit=0 a0=9a20e08 a1=bfca2268 a2=bfca4b40 a3=9a20e08 items=0 ppid=4910 pid=4911 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188558282.159:55):  path="socket:[58077]"
>type=AVC_PATH msg=audit(1188558282.159:55):  path="socket:[58076]"
>type=AVC msg=audit(1188558282.182:56): avc:  denied  { write } for  pid=4917 comm="modprobe" name="iptables.Rw4914" dev=dm-0 ino=6044358 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:object_r:initrc_tmp_t:s0 tclass=file
>type=AVC msg=audit(1188558282.182:56): avc:  denied  { read } for  pid=4917 comm="modprobe" name="ip_tables_names" dev=proc ino=-268435041 scontext=user_u:system_r:insmod_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
>type=AVC msg=audit(1188558282.182:56): avc:  denied  { read write } for  pid=4917 comm="modprobe" name="" dev=sockfs ino=58085 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188558282.182:56): avc:  denied  { read write } for  pid=4917 comm="modprobe" name="" dev=sockfs ino=58086 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188558282.182:56): arch=40000003 syscall=11 success=yes exit=0 a0=9828f68 a1=bfc55368 a2=bfc55aac a3=9828f68 items=0 ppid=4916 pid=4917 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188558282.182:56):  path="socket:[58086]"
>type=AVC_PATH msg=audit(1188558282.182:56):  path="socket:[58085]"
>type=AVC_PATH msg=audit(1188558282.182:56):  path="/proc/net/ip_tables_names"
>type=AVC_PATH msg=audit(1188558282.182:56):  path="/tmp/iptables.Rw4914"
>type=AVC msg=audit(1188558527.012:57): avc:  denied  { read write } for  pid=4954 comm="modprobe" name="" dev=sockfs ino=65408 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188558527.012:57): avc:  denied  { read write } for  pid=4954 comm="modprobe" name="" dev=sockfs ino=65409 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188558527.012:57): arch=40000003 syscall=11 success=yes exit=0 a0=8af5e08 a1=bf9a2838 a2=bf9a5110 a3=8af5e08 items=0 ppid=4953 pid=4954 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188558527.012:57):  path="socket:[65409]"
>type=AVC_PATH msg=audit(1188558527.012:57):  path="socket:[65408]"
>type=AVC msg=audit(1188558527.587:58): avc:  denied  { read write } for  pid=5224 comm="modprobe" name="" dev=sockfs ino=65712 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188558527.587:58): avc:  denied  { read write } for  pid=5224 comm="modprobe" name="" dev=sockfs ino=65713 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188558527.587:58): arch=40000003 syscall=11 success=yes exit=0 a0=84c8e08 a1=bf923ee8 a2=bf9267c0 a3=84c8e08 items=0 ppid=5223 pid=5224 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188558527.587:58):  path="socket:[65713]"
>type=AVC_PATH msg=audit(1188558527.587:58):  path="socket:[65712]"
>type=AVC msg=audit(1188558527.601:59): avc:  denied  { write } for  pid=5230 comm="modprobe" name="iptables.mH5227" dev=dm-0 ino=6044358 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:object_r:initrc_tmp_t:s0 tclass=file
>type=AVC msg=audit(1188558527.601:59): avc:  denied  { read } for  pid=5230 comm="modprobe" name="ip_tables_names" dev=proc ino=-268435041 scontext=user_u:system_r:insmod_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
>type=AVC msg=audit(1188558527.601:59): avc:  denied  { read write } for  pid=5230 comm="modprobe" name="" dev=sockfs ino=65721 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188558527.601:59): avc:  denied  { read write } for  pid=5230 comm="modprobe" name="" dev=sockfs ino=65722 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188558527.601:59): arch=40000003 syscall=11 success=yes exit=0 a0=8916f68 a1=bfdd6558 a2=bfdd6c9c a3=8916f68 items=0 ppid=5229 pid=5230 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188558527.601:59):  path="socket:[65722]"
>type=AVC_PATH msg=audit(1188558527.601:59):  path="socket:[65721]"
>type=AVC_PATH msg=audit(1188558527.601:59):  path="/proc/net/ip_tables_names"
>type=AVC_PATH msg=audit(1188558527.601:59):  path="/tmp/iptables.mH5227"
>type=CRED_DISP msg=audit(1188559425.678:60): user pid=4258 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188559425.748:61): user pid=4258 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188561662.020:62): user pid=5358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188561665.388:63): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_END msg=audit(1188561670.182:64): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188562550.372:65): user pid=5440 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188562550.372:66): user pid=5440 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188562550.487:67): user pid=5440 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188562550.501:68): user pid=5440 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188562676.468:69): dev=vnet0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1188562676.468:69): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff9a3f8 a3=6 items=0 ppid=1 pid=3473 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null)
>type=CRED_DISP msg=audit(1188562925.196:70): user pid=5440 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188562925.197:71): user pid=5440 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188563010.755:72): user pid=5547 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188563010.755:73): user pid=5547 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188563010.850:74): user pid=5547 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188563484.480:75): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1188563499.220:76): dev=vnet0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1188563499.220:76): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff9a408 a3=6 items=0 ppid=1 pid=3473 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null)
>type=USER_ACCT msg=audit(1188565261.750:77): user pid=6123 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188565831.511:78): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_END msg=audit(1188565837.794:79): user pid=5547 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188568179.998:80): user pid=6881 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188568179.998:81): user pid=6881 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188568202.612:82): user pid=6883 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188568202.613:83): user pid=6883 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188568202.711:84): user pid=6883 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188568202.732:85): user pid=6883 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188568861.317:86): user pid=6977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188569124.138:87): user pid=6883 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188569124.139:88): user pid=6883 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188569141.198:89): user pid=7039 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188569141.199:90): user pid=7039 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188569141.221:91): user pid=7039 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188569141.221:92): user pid=7039 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188572461.603:93): user pid=7747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188572697.560:94): user pid=7039 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188572697.561:95): user pid=7039 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188572725.252:96): user pid=7869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188572725.252:97): user pid=7869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188572725.265:98): user pid=7869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188572725.265:99): user pid=7869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188572725.310:100): user pid=7869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188572725.311:101): user pid=7869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188576061.699:102): user pid=8617 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188579661.744:103): user pid=9050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188582098.507:104): user pid=9265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188582098.508:105): user pid=9265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188582098.565:106): user pid=9265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188582208.674:107): user pid=9265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188583261.987:108): user pid=9420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188586861.178:109): user pid=9915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188587900.742:110): user pid=10196 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188587900.742:111): user pid=10196 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188587900.800:112): user pid=10196 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188587900.821:113): user pid=10196 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1188587900.836:114): user pid=10196 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188587900.836:115): user pid=10196 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188590461.239:116): user pid=10653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188594061.279:117): user pid=10994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188595746.790:118): user pid=11224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188595746.790:119): user pid=11224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188595746.969:120): user pid=11224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1188596150.371:121): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=11342 comm="telepathy-gabbl" sig=11
>type=USER_CHAUTHTOK msg=audit(1188597092.855:122): user pid=11539 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=bitlbee exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188597112.068:123): user pid=11224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188597130.027:124): user pid=11576 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188597130.028:125): user pid=11576 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188597130.132:126): user pid=11576 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188597130.153:127): user pid=11576 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188597268.888:128): user pid=11576 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188597268.890:129): user pid=11576 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188597661.805:130): user pid=11740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1188598998.973:131): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12155 comm="testStat" sig=11
>type=ANOM_ABEND msg=audit(1188599554.276:132): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12389 comm="testStat" sig=11
>type=ANOM_ABEND msg=audit(1188599569.956:133): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12392 comm="testStat" sig=11
>type=ANOM_ABEND msg=audit(1188599649.394:134): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12415 comm="testStat" sig=11
>type=ANOM_ABEND msg=audit(1188599676.386:135): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12431 comm="testStat" sig=11
>type=ANOM_ABEND msg=audit(1188599689.228:136): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12435 comm="testStat" sig=11
>type=ANOM_ABEND msg=audit(1188599729.959:137): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12444 comm="testStat" sig=11
>type=USER_ACCT msg=audit(1188601261.982:138): user pid=12662 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188602402.001:139): user pid=12904 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188602900.658:140): user pid=12999 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188602903.530:141): user pid=13001 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188602903.530:142): user pid=13001 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188602903.543:143): user pid=13001 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188602903.543:144): user pid=13001 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188603183.279:145): user pid=13001 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188603183.279:146): user pid=13001 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188604861.055:147): user pid=13377 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188604906.012:148): user pid=13419 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188604908.203:149): user pid=13420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188604908.203:150): user pid=13420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188604908.275:151): user pid=13420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188604908.276:152): user pid=13420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188605099.184:153): user pid=13420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188605099.211:154): user pid=13420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188606646.965:155): user pid=13675 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188606649.335:156): user pid=13676 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188606649.335:157): user pid=13676 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188606649.377:158): user pid=13676 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188606649.377:159): user pid=13676 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188606674.678:160): user pid=13676 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188606674.678:161): user pid=13676 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188607648.866:162): user pid=14333 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188607648.867:163): user pid=14333 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188607648.892:164): user pid=14333 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188607648.892:165): user pid=14333 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188607934.025:166): user pid=14333 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188607934.026:167): user pid=14333 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188607939.699:168): user pid=14422 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188607939.700:169): user pid=14422 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188607939.764:170): user pid=14422 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188607939.765:171): user pid=14422 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188608461.283:172): user pid=14502 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188608713.078:173): user pid=14422 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188608713.079:174): user pid=14422 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1188609031.499:175): user pid=14729 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1188630143.608:4389): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1919 res=success, auditd pid=1919
>type=CONFIG_CHANGE msg=audit(1188630143.708:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188630143.708:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188630143.973:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188630143.973:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188630150.837:9): avc:  denied  { write } for  pid=2034 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188630150.837:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa7a080 a2=63a494 a3=0 items=0 ppid=1 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1188630151.049:10): avc:  denied  { read write } for  pid=2253 comm="modprobe" name="" dev=sockfs ino=9471 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188630151.049:10): avc:  denied  { read write } for  pid=2253 comm="modprobe" name="" dev=sockfs ino=9481 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188630151.049:10): arch=40000003 syscall=11 success=yes exit=0 a0=885a1d8 a1=bfccfdd8 a2=bfcd3210 a3=885a1d8 items=0 ppid=2213 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188630151.049:10):  path="socket:[9481]"
>type=AVC_PATH msg=audit(1188630151.049:10):  path="socket:[9471]"
>type=ANOM_ABEND msg=audit(1188630163.229:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2748 comm="hald-addon-acpi" sig=11
>type=USER_ERR msg=audit(1188630166.156:12): user pid=2882 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188630191.649:13): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188630191.652:14): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188630191.653:15): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188630191.657:16): login pid=2983 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188630191.675:17): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188630191.676:18): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188631934.797:19): user pid=3654 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188631934.797:20): user pid=3654 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188631934.899:21): user pid=3654 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188633661.826:22): user pid=3893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188637261.951:23): user pid=4203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188640591.097:24): user pid=3654 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188640600.771:25): user pid=4438 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188640600.771:26): user pid=4438 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188640600.783:27): user pid=4438 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188640861.077:28): user pid=4464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188644245.763:29): user pid=4438 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188644461.114:30): user pid=4747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188646926.979:31): user pid=4941 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188646926.979:32): user pid=4941 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188646926.993:33): user pid=4941 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188647202.618:34): user pid=4941 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188648061.338:35): user pid=5244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1188651480.500:36): user pid=7051 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1188659894.184:455): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1929 res=success, auditd pid=1929
>type=CONFIG_CHANGE msg=audit(1188659894.283:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188659894.283:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188659894.400:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188659894.400:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188659901.524:9): avc:  denied  { write } for  pid=2044 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188659901.524:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf992fa0 a2=63a494 a3=0 items=0 ppid=1 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1188659901.868:10): avc:  denied  { read write } for  pid=2263 comm="modprobe" name="" dev=sockfs ino=9439 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188659901.868:10): avc:  denied  { read write } for  pid=2263 comm="modprobe" name="" dev=sockfs ino=9447 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188659901.868:10): arch=40000003 syscall=11 success=yes exit=0 a0=83771d8 a1=bfa9ed08 a2=bfaa2140 a3=83771d8 items=0 ppid=2223 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188659901.868:10):  path="socket:[9447]"
>type=AVC_PATH msg=audit(1188659901.868:10):  path="socket:[9439]"
>type=USER_ERR msg=audit(1188659917.125:11): user pid=2891 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188659929.215:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2762 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188659997.460:13): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188659997.463:14): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188659997.464:15): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188659997.468:16): login pid=2998 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188659997.489:17): user pid=2998 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188659997.491:18): user pid=2998 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188660518.534:19): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188660518.535:20): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188660518.625:21): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188660518.625:22): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188660792.965:23): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188660792.968:24): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188661474.306:25): user pid=2998 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188661474.306:26): user pid=2998 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188661477.776:27): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2624 comm="dhcdbd" sig=6
>type=AVC msg=audit(1188661483.102:28): avc:  denied  { read write } for  pid=4615 comm="modprobe" name="" dev=sockfs ino=56408 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188661483.102:28): avc:  denied  { read write } for  pid=4615 comm="modprobe" name="" dev=sockfs ino=56409 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188661483.102:28): arch=40000003 syscall=11 success=yes exit=0 a0=98afe08 a1=bfd38a68 a2=bfd3b340 a3=98afe08 items=0 ppid=4614 pid=4615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188661483.102:28):  path="socket:[56409]"
>type=AVC_PATH msg=audit(1188661483.102:28):  path="socket:[56408]"
>type=ANOM_ABEND msg=audit(1188661484.373:29): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2010 comm="named" sig=6
>type=DAEMON_END msg=audit(1188661484.766:456): auditd normal halt, sending auid=4294967295 pid=5055 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1929
>type=DAEMON_START msg=audit(1188677324.570:2323): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1894 res=success, auditd pid=1894
>type=CONFIG_CHANGE msg=audit(1188677324.669:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188677324.669:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188677324.692:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188677324.692:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188677331.376:9): avc:  denied  { read write } for  pid=2225 comm="modprobe" name="" dev=sockfs ino=9477 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188677331.376:9): avc:  denied  { read write } for  pid=2225 comm="modprobe" name="" dev=sockfs ino=9487 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188677331.376:9): arch=40000003 syscall=11 success=yes exit=0 a0=9e7d1d8 a1=bff1e088 a2=bff214c0 a3=9e7d1d8 items=0 ppid=2186 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188677331.376:9):  path="socket:[9487]"
>type=AVC_PATH msg=audit(1188677331.376:9):  path="socket:[9477]"
>type=AVC msg=audit(1188677331.598:10): avc:  denied  { write } for  pid=2009 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188677331.598:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfc59260 a2=63a494 a3=0 items=0 ppid=1 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188677347.161:11): user pid=2856 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188677399.572:12): user pid=2952 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188677399.575:13): user pid=2952 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188677399.576:14): user pid=2952 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188677399.580:15): login pid=2952 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188677399.590:16): user pid=2952 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188677399.591:17): user pid=2952 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188677563.617:18): user pid=3430 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188677563.617:19): user pid=3430 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188677563.721:20): user pid=3430 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188677708.824:21): user pid=3430 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188680461.545:22): user pid=17064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1188681095.293:23): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=29514 comm="mkfile" sig=11
>type=ANOM_ABEND msg=audit(1188681105.269:24): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=29516 comm="mkfile" sig=11
>type=ANOM_ABEND msg=audit(1188681220.726:25): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=30733 comm="mkfile" sig=11
>type=ANOM_ABEND msg=audit(1188681279.053:26): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=30737 comm="mkfile" sig=8
>type=USER_AUTH msg=audit(1188681483.076:27): user pid=30885 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188681483.076:28): user pid=30885 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188681483.086:29): user pid=30885 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188681494.909:30): user pid=30885 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188684061.631:31): user pid=32395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1188687283.504:32): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12475 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188687386.321:33): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=15404 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188687403.952:34): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=15407 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188687513.853:35): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=15413 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188687523.907:36): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=15416 comm="mkfile" sig=8
>type=USER_ACCT msg=audit(1188687661.683:37): user pid=15698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1188687866.861:38): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17131 comm="mkfile" sig=11
>type=ANOM_ABEND msg=audit(1188688305.967:39): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17194 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188688448.830:40): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17379 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188688522.967:41): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17436 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188688651.154:42): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17509 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188688700.221:43): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17582 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188688762.811:44): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17685 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188688899.970:45): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17769 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188688955.666:46): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=18847 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188689721.965:47): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19038 comm="mkfile" sig=11
>type=ANOM_ABEND msg=audit(1188689954.815:48): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19134 comm="mkfile" sig=11
>type=ANOM_ABEND msg=audit(1188690873.036:49): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19295 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188690977.081:50): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19324 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188691045.817:51): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19337 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188691098.350:52): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19349 comm="mkfile" sig=11
>type=USER_ACCT msg=audit(1188691261.724:53): user pid=19369 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1188691717.424:54): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19517 comm="mkfile" sig=11
>type=ANOM_ABEND msg=audit(1188691825.036:55): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19538 comm="mkfile" sig=11
>type=ANOM_ABEND msg=audit(1188691879.108:56): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19551 comm="mkfile" sig=11
>type=ANOM_ABEND msg=audit(1188692358.409:57): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19631 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188692898.940:58): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=20031 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188693102.500:59): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=20178 comm="mkfile" sig=11
>type=ANOM_ABEND msg=audit(1188693609.952:60): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=22801 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188693646.324:61): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=22836 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188693650.737:62): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=22842 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188693794.563:63): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=23014 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188693849.026:64): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=23022 comm="mkfile" sig=8
>type=ANOM_ABEND msg=audit(1188693874.843:65): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=23066 comm="mkfile" sig=8
>type=USER_ACCT msg=audit(1188694861.771:66): user pid=24728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188697013.650:67): user pid=32099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188697013.650:68): user pid=32099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188697013.664:69): user pid=32099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188697013.664:70): user pid=32099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188697013.674:71): user pid=32099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188697013.674:72): user pid=32099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188697024.969:73): user pid=32103 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188697024.969:74): user pid=32103 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188697024.981:75): user pid=32103 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188697024.981:76): user pid=32103 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188697077.244:77): user pid=32171 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188697077.244:78): user pid=32171 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188697077.290:79): user pid=32171 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188697077.290:80): user pid=32171 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188697097.337:81): user pid=32171 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188697097.337:82): user pid=32171 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188697102.615:83): user pid=32103 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188697102.615:84): user pid=32103 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188697211.526:85): user pid=32301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188697211.527:86): user pid=32301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188697211.542:87): user pid=32301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188697211.543:88): user pid=32301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188697224.511:89): user pid=32301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188697224.511:90): user pid=32301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1188697237.499:91): user pid=32471 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1188717809.595:4365): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1927 res=success, auditd pid=1927
>type=CONFIG_CHANGE msg=audit(1188717809.695:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188717809.695:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188717809.897:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188717809.897:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188717816.914:9): avc:  denied  { read write } for  pid=2260 comm="modprobe" name="" dev=sockfs ino=9407 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188717816.914:9): avc:  denied  { read write } for  pid=2260 comm="modprobe" name="" dev=sockfs ino=9417 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188717816.914:9): arch=40000003 syscall=11 success=yes exit=0 a0=96621d8 a1=bfce3078 a2=bfce64b0 a3=96621d8 items=0 ppid=2221 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188717816.914:9):  path="socket:[9417]"
>type=AVC_PATH msg=audit(1188717816.914:9):  path="socket:[9407]"
>type=AVC msg=audit(1188717817.264:10): avc:  denied  { write } for  pid=2042 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188717817.264:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf81cdf0 a2=63a494 a3=0 items=0 ppid=1 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188717832.623:11): user pid=2891 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188717860.041:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2770 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188718246.985:13): user pid=2993 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188718246.987:14): user pid=2993 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188718246.987:15): user pid=2993 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188718246.989:16): login pid=2993 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188718246.998:17): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188718246.999:18): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188720061.946:19): user pid=3515 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188723661.028:20): user pid=3752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188727261.096:21): user pid=3986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188730861.139:22): user pid=4225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188734461.165:23): user pid=4466 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188734771.500:24): user pid=4512 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188734771.500:25): user pid=4512 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188734771.579:26): user pid=4512 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188734771.579:27): user pid=4512 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188734826.885:28): user pid=4512 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188734826.886:29): user pid=4512 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188735928.905:30): user pid=5971 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188735928.905:31): user pid=5971 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188735928.941:32): user pid=5971 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188736058.212:33): user pid=5971 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188737019.735:34): user pid=6149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188737019.736:35): user pid=6149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188737019.755:36): user pid=6149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188737019.755:37): user pid=6149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188737066.430:38): user pid=6149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188737066.431:39): user pid=6149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188737701.186:40): user pid=6349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188737701.187:41): user pid=6349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188737701.199:42): user pid=6349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188737701.199:43): user pid=6349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188737737.752:44): user pid=6349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188737737.752:45): user pid=6349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188737765.204:46): user pid=6358 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188737765.205:47): user pid=6358 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188737765.218:48): user pid=6358 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188737765.218:49): user pid=6358 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188737778.645:50): user pid=6358 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188737778.646:51): user pid=6358 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188738061.287:52): user pid=6561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1188738106.499:53): user pid=6696 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1188759905.827:6632): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1918 res=success, auditd pid=1918
>type=CONFIG_CHANGE msg=audit(1188759905.928:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188759905.928:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188759905.999:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188759905.999:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188759913.166:9): avc:  denied  { write } for  pid=2033 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188759913.166:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bff59560 a2=63a494 a3=0 items=0 ppid=1 pid=2033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1188759913.623:10): avc:  denied  { read write } for  pid=2252 comm="modprobe" name="" dev=sockfs ino=9433 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188759913.623:10): avc:  denied  { read write } for  pid=2252 comm="modprobe" name="" dev=sockfs ino=9441 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188759913.623:10): arch=40000003 syscall=11 success=yes exit=0 a0=9ac91d8 a1=bfb1ef68 a2=bfb223a0 a3=9ac91d8 items=0 ppid=2214 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188759913.623:10):  path="socket:[9441]"
>type=AVC_PATH msg=audit(1188759913.623:10):  path="socket:[9433]"
>type=USER_ERR msg=audit(1188759928.391:11): user pid=2881 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188760085.495:12): user pid=2988 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188760085.499:13): user pid=2988 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188760085.500:14): user pid=2988 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188760085.504:15): login pid=2988 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188760085.524:16): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188760085.525:17): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188763261.535:18): user pid=3714 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1188763285.850:19): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2763 comm="hald-addon-acpi" sig=11
>type=USER_END msg=audit(1188766243.777:20): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188766243.778:21): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188766247.025:22): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2614 comm="dhcdbd" sig=6
>type=AVC msg=audit(1188766252.412:23): avc:  denied  { read write } for  pid=4576 comm="modprobe" name="" dev=sockfs ino=151443 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188766252.412:23): avc:  denied  { read write } for  pid=4576 comm="modprobe" name="" dev=sockfs ino=151444 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188766252.412:23): arch=40000003 syscall=11 success=yes exit=0 a0=9f05e08 a1=bfd661c8 a2=bfd68aa0 a3=9f05e08 items=0 ppid=4575 pid=4576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188766252.412:23):  path="socket:[151444]"
>type=AVC_PATH msg=audit(1188766252.412:23):  path="socket:[151443]"
>type=ANOM_ABEND msg=audit(1188766253.785:24): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1999 comm="named" sig=6
>type=DAEMON_END msg=audit(1188766254.165:6633): auditd normal halt, sending auid=4294967295 pid=5016 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1918
>type=DAEMON_START msg=audit(1188799326.732:8518): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1922 res=success, auditd pid=1922
>type=CONFIG_CHANGE msg=audit(1188799326.832:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188799326.832:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188799326.865:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188799326.865:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188799333.496:9): avc:  denied  { read write } for  pid=2254 comm="modprobe" name="" dev=sockfs ino=9448 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188799333.496:9): avc:  denied  { read write } for  pid=2254 comm="modprobe" name="" dev=sockfs ino=9458 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188799333.496:9): arch=40000003 syscall=11 success=yes exit=0 a0=897d1d8 a1=bf8bd228 a2=bf8c0660 a3=897d1d8 items=0 ppid=2215 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188799333.496:9):  path="socket:[9458]"
>type=AVC_PATH msg=audit(1188799333.496:9):  path="socket:[9448]"
>type=AVC msg=audit(1188799333.785:10): avc:  denied  { write } for  pid=2037 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188799333.785:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8eff00 a2=63a494 a3=0 items=0 ppid=1 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188799349.101:11): user pid=2884 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188799354.280:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2767 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188799363.688:13): user pid=2992 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188799363.692:14): user pid=2992 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188799363.693:15): user pid=2992 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188799363.697:16): login pid=2992 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188799363.717:17): user pid=2992 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188799363.719:18): user pid=2992 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1188800450.724:19): user pid=2992 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188800450.724:20): user pid=2992 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188800453.940:21): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2618 comm="dhcdbd" sig=6
>type=AVC msg=audit(1188800459.464:22): avc:  denied  { read write } for  pid=4447 comm="modprobe" name="" dev=sockfs ino=46399 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188800459.464:22): avc:  denied  { read write } for  pid=4447 comm="modprobe" name="" dev=sockfs ino=46400 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188800459.464:22): arch=40000003 syscall=11 success=yes exit=0 a0=a021e08 a1=bfd832b8 a2=bfd85b90 a3=a021e08 items=0 ppid=4446 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188800459.464:22):  path="socket:[46400]"
>type=AVC_PATH msg=audit(1188800459.464:22):  path="socket:[46399]"
>type=ANOM_ABEND msg=audit(1188800460.735:23): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2003 comm="named" sig=6
>type=DAEMON_END msg=audit(1188800461.129:8519): auditd normal halt, sending auid=4294967295 pid=4887 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1922
>type=DAEMON_START msg=audit(1188804689.940:7433): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1896 res=success, auditd pid=1896
>type=CONFIG_CHANGE msg=audit(1188804690.040:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188804690.040:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188804690.304:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188804690.304:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188804697.798:9): avc:  denied  { write } for  pid=2011 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188804697.798:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf84d660 a2=63a494 a3=0 items=0 ppid=1 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1188804698.023:10): avc:  denied  { read write } for  pid=2232 comm="modprobe" name="" dev=sockfs ino=9438 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188804698.023:10): avc:  denied  { read write } for  pid=2232 comm="modprobe" name="" dev=sockfs ino=9448 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188804698.023:10): arch=40000003 syscall=11 success=yes exit=0 a0=8ecc1d8 a1=bfdf3208 a2=bfdf6640 a3=8ecc1d8 items=0 ppid=2192 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188804698.023:10):  path="socket:[9448]"
>type=AVC_PATH msg=audit(1188804698.023:10):  path="socket:[9438]"
>type=USER_ERR msg=audit(1188804714.070:11): user pid=2860 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188804715.002:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2747 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188804729.222:13): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188804729.223:14): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1188804729.228:15): login pid=2854 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188804729.324:16): user pid=2854 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188804729.331:17): user pid=2854 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1188804729.331:18): user pid=2854 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1188804729.341:19): user pid=2854 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1188804738.012:20): user pid=2972 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188804738.016:21): user pid=2972 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188804738.017:22): user pid=2972 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188804738.021:23): login pid=2972 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188804738.041:24): user pid=2972 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188804738.043:25): user pid=2972 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188804791.059:26): user pid=3414 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188804791.059:27): user pid=3414 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188804791.146:28): user pid=3414 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188804791.146:29): user pid=3414 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188804919.611:30): user pid=3414 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188804919.613:31): user pid=3414 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188805374.250:32): user pid=2972 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188805374.250:33): user pid=2972 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188805376.028:34): user pid=2854 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1188805376.031:35): user pid=2854 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1188805377.488:36): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2594 comm="dhcdbd" sig=6
>type=AVC msg=audit(1188805383.107:37): avc:  denied  { read write } for  pid=4709 comm="modprobe" name="" dev=sockfs ino=30527 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188805383.107:37): avc:  denied  { read write } for  pid=4709 comm="modprobe" name="" dev=sockfs ino=30528 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188805383.107:37): arch=40000003 syscall=11 success=yes exit=0 a0=8628e08 a1=bfca5918 a2=bfca81f0 a3=8628e08 items=0 ppid=4708 pid=4709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188805383.107:37):  path="socket:[30528]"
>type=AVC_PATH msg=audit(1188805383.107:37):  path="socket:[30527]"
>type=ANOM_ABEND msg=audit(1188805384.457:38): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1977 comm="named" sig=6
>type=DAEMON_END msg=audit(1188805384.855:7434): auditd normal halt, sending auid=4294967295 pid=5149 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1896
>type=DAEMON_START msg=audit(1188808284.388:7402): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1897 res=success, auditd pid=1897
>type=CONFIG_CHANGE msg=audit(1188808284.487:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188808284.487:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188808284.707:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188808284.707:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188808291.700:9): avc:  denied  { read write } for  pid=2213 comm="modprobe" name="" dev=sockfs ino=9374 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188808291.700:9): avc:  denied  { read write } for  pid=2213 comm="modprobe" name="" dev=sockfs ino=9384 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188808291.700:9): arch=40000003 syscall=11 success=yes exit=0 a0=8d8b1d8 a1=bfa102f8 a2=bfa13730 a3=8d8b1d8 items=0 ppid=2174 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188808291.700:9):  path="socket:[9384]"
>type=AVC_PATH msg=audit(1188808291.700:9):  path="socket:[9374]"
>type=AVC msg=audit(1188808292.072:10): avc:  denied  { write } for  pid=2012 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188808292.072:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa2a830 a2=63a494 a3=0 items=0 ppid=1 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188808307.210:11): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188808320.472:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2726 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188808322.203:13): user pid=2937 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188808322.205:14): user pid=2937 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188808322.205:15): user pid=2937 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188808322.207:16): login pid=2937 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188808322.215:17): user pid=2937 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188808322.215:18): user pid=2937 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188808794.346:19): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3574 comm="totem-video-thu" sig=11
>type=ANOM_ABEND msg=audit(1188808877.779:20): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3584 comm="totem-video-thu" sig=11
>type=ANOM_ABEND msg=audit(1188808911.757:21): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3592 comm="ffmpeg2theora" sig=11
>type=ANOM_ABEND msg=audit(1188808919.155:22): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3595 comm="ffplay" sig=11
>type=USER_ACCT msg=audit(1188810061.734:23): user pid=4096 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188810061.951:24): user pid=4095 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188810061.952:25): user pid=4095 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188810062.007:26): user pid=4095 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188810062.007:27): user pid=4095 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188810062.022:28): user pid=4095 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188810062.023:29): user pid=4095 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1188810136.476:30): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=4130 comm="ffmpeg" sig=11
>type=USER_AUTH msg=audit(1188811003.819:31): user pid=4242 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188811003.819:32): user pid=4242 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188811003.849:33): user pid=4242 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1188811802.641:34): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=4391 comm="ffmpeg" sig=11
>type=USER_AUTH msg=audit(1188812271.847:35): user pid=4481 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188812271.848:36): user pid=4481 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188812271.866:37): user pid=4481 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188812271.866:38): user pid=4481 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188812294.730:39): user pid=4481 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188812294.731:40): user pid=4481 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188812546.056:41): user pid=4577 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=failed)'
>type=USER_AUTH msg=audit(1188812548.595:42): user pid=4578 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188812548.595:43): user pid=4578 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1188812548.626:44): user pid=4578 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1188812548.626:45): user pid=4578 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1188812591.665:46): user pid=4578 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1188812591.665:47): user pid=4578 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=ANOM_ABEND msg=audit(1188813139.774:48): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=4803 comm="ffplay" sig=11
>type=ANOM_ABEND msg=audit(1188813161.737:49): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=4806 comm="ffplay" sig=11
>type=USER_AUTH msg=audit(1188813568.411:50): user pid=4963 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188813568.411:51): user pid=4963 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188813568.634:52): user pid=4963 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188813568.705:53): user pid=4963 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188813651.976:54): user pid=4963 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188813651.976:55): user pid=4963 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188813661.987:56): user pid=5006 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188814709.645:57): user pid=5195 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188814709.646:58): user pid=5195 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188814709.752:59): user pid=5195 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188814735.641:60): user pid=5195 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188814758.165:61): user pid=5209 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188814758.165:62): user pid=5209 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188814758.183:63): user pid=5209 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188814758.212:64): user pid=5209 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1188814766.319:65): avc:  denied  { write } for  pid=5257 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188814766.319:65): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf815e10 a2=63a494 a3=0 items=0 ppid=1 pid=5257 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=user_u:system_r:setroubleshootd_t:s0 key=(null)
>type=CRED_DISP msg=audit(1188814770.761:66): user pid=5209 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188814770.771:67): user pid=5209 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188814811.820:68): user pid=4242 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1188815131.292:69): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=5339 comm="ffplay" sig=11
>type=USER_AUTH msg=audit(1188815896.998:70): user pid=5437 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188815899.878:71): user pid=5437 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188815899.878:72): user pid=5437 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188816150.641:73): user pid=5462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188816150.641:74): user pid=5462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188816150.660:75): user pid=5462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188816150.660:76): user pid=5462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188816371.290:77): user pid=5462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188816371.290:78): user pid=5462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1188816393.360:79): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=5558 comm="ffplay" sig=11
>type=ANOM_ABEND msg=audit(1188817094.835:80): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=5662 comm="ffplay" sig=11
>type=USER_ACCT msg=audit(1188817261.354:81): user pid=5681 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188820861.437:82): user pid=6109 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188822009.195:83): user pid=6324 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188822009.196:84): user pid=6324 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188822009.209:85): user pid=6324 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188822087.114:86): user pid=6324 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188822099.242:87): user pid=6338 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188822099.242:88): user pid=6338 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188822099.258:89): user pid=6338 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188822099.258:90): user pid=6338 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1188822207.776:91): user pid=6338 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188822207.777:92): user pid=6338 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1188823133.813:93): user pid=19253 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188823133.814:94): user pid=19253 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188823133.822:95): user pid=19253 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188823133.822:96): user pid=19253 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188823161.976:97): user pid=19253 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188823161.977:98): user pid=19253 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188823398.681:99): user pid=19329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188823398.682:100): user pid=19329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188823398.695:101): user pid=19329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188823445.776:102): user pid=19329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188823482.737:103): user pid=19348 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188823482.738:104): user pid=19348 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188823482.751:105): user pid=19348 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188823482.751:106): user pid=19348 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188823522.210:107): user pid=19348 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188823522.210:108): user pid=19348 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188824185.149:109): user pid=2037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188824185.149:110): user pid=2037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188824185.161:111): user pid=2037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188824185.162:112): user pid=2037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188824249.968:113): user pid=2037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188824249.969:114): user pid=2037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188824412.375:115): user pid=2099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188824412.375:116): user pid=2099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188824412.399:117): user pid=2099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188824461.475:118): user pid=2110 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188824470.238:119): user pid=2099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188824539.990:120): user pid=2140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188824539.990:121): user pid=2140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188824540.090:122): user pid=2140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188824540.091:123): user pid=2140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188824541.361:124): user pid=2140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188824541.362:125): user pid=2140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188824632.977:126): user pid=15159 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188824632.977:127): user pid=15159 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188824632.984:128): user pid=15159 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188824632.984:129): user pid=15159 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188824636.565:130): user pid=15159 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188824636.566:131): user pid=15159 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188825642.475:132): user pid=15239 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188825642.475:133): user pid=15239 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188825642.519:134): user pid=15239 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188825642.519:135): user pid=15239 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188825642.668:136): user pid=15239 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188825642.668:137): user pid=15239 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188826391.841:138): user pid=15360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188826391.841:139): user pid=15360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1188826391.856:140): user pid=15360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1188826391.857:141): user pid=15360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1188827228.832:142): user pid=15360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1188827228.846:143): user pid=15360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1188827382.767:144): user pid=19877 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188827382.768:145): user pid=19877 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188828046.283:146): user pid=19947 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188828046.284:147): user pid=19947 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188828046.369:148): user pid=19947 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188828046.369:149): user pid=19947 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188828061.674:150): user pid=19982 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1188828146.972:151): user pid=19947 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188828146.972:152): user pid=19947 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188828160.228:153): user pid=20060 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188828160.228:154): user pid=20060 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188828160.241:155): user pid=20060 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188828160.241:156): user pid=20060 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188828221.569:157): user pid=20060 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188828221.570:158): user pid=20060 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188828229.301:159): user pid=20096 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188828229.301:160): user pid=20096 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188828229.319:161): user pid=20096 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188828229.319:162): user pid=20096 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1188828235.275:163): user pid=20096 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188828235.275:164): user pid=20096 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188828239.102:165): user pid=20132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188828239.102:166): user pid=20132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188828239.119:167): user pid=20132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188828239.119:168): user pid=20132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188828282.298:169): user pid=20232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188828282.298:170): user pid=20232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188828282.368:171): user pid=20232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188828291.776:172): user pid=20232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1188828293.462:173): user pid=20132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188828293.462:174): user pid=20132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188830939.518:175): user pid=20435 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188830942.253:176): user pid=20436 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188830942.254:177): user pid=20436 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188830942.272:178): user pid=20436 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188830942.272:179): user pid=20436 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188831327.052:180): user pid=20436 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188831327.054:181): user pid=20436 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188831332.972:182): user pid=20497 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188831332.972:183): user pid=20497 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188831332.986:184): user pid=20497 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188831661.832:185): user pid=20517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188832602.134:186): user pid=20497 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188833679.714:187): user pid=24650 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188833684.240:188): user pid=24651 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188833687.074:189): user pid=24652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188833687.075:190): user pid=24652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188833687.150:191): user pid=24652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188833687.157:192): user pid=24652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188833867.814:193): user pid=24652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188833867.814:194): user pid=24652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188835261.112:195): user pid=25098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188837062.287:196): user pid=25490 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188837062.288:197): user pid=25490 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188837062.306:198): user pid=25490 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188837062.307:199): user pid=25490 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1188837120.365:200): user pid=25490 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188837120.365:201): user pid=25490 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188837778.013:202): user pid=2937 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188837778.014:203): user pid=2937 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188837782.798:204): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2577 comm="dhcdbd" sig=6
>type=AVC msg=audit(1188837791.202:205): avc:  denied  { read write } for  pid=26274 comm="modprobe" name="" dev=sockfs ino=815597 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188837791.202:205): avc:  denied  { read write } for  pid=26274 comm="modprobe" name="" dev=sockfs ino=815598 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188837791.202:205): arch=40000003 syscall=11 success=yes exit=0 a0=8722e08 a1=bfebabe8 a2=bfebd4c0 a3=8722e08 items=0 ppid=26273 pid=26274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188837791.202:205):  path="socket:[815598]"
>type=AVC_PATH msg=audit(1188837791.202:205):  path="socket:[815597]"
>type=ANOM_ABEND msg=audit(1188837794.303:206): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1978 comm="named" sig=6
>type=DAEMON_END msg=audit(1188837797.814:7403): auditd normal halt, sending auid=4294967295 pid=26719 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1897
>type=DAEMON_START msg=audit(1188838825.725:9667): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1981 res=success, auditd pid=1981
>type=CONFIG_CHANGE msg=audit(1188838825.825:53): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188838825.825:54): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188838825.847:55): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188838825.847:56): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188838832.552:57): avc:  denied  { write } for  pid=2136 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188838832.552:57): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfc72c20 a2=63a494 a3=0 items=0 ppid=1 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1188838832.707:58): avc:  denied  { read write } for  pid=2384 comm="modprobe" name="" dev=sockfs ino=19074 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188838832.707:58): avc:  denied  { read write } for  pid=2384 comm="modprobe" name="" dev=sockfs ino=19084 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188838832.707:58): arch=40000003 syscall=11 success=yes exit=0 a0=81d61d8 a1=bfaa8708 a2=bfaabb40 a3=81d61d8 items=0 ppid=2343 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188838832.707:58):  path="socket:[19084]"
>type=AVC_PATH msg=audit(1188838832.707:58):  path="socket:[19074]"
>type=USER_AUTH msg=audit(1188838847.087:59): user pid=3050 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1188838847.087:60): user pid=3050 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1188838847.090:61): login pid=3050 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1188838847.165:62): user pid=3050 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1188838847.169:63): user pid=3050 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1188838847.182:64): user pid=3050 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1188838847.183:65): user pid=3050 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1188838847.394:66): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2991 comm="hald-addon-acpi" sig=11
>type=USER_ACCT msg=audit(1188838861.560:67): user pid=3145 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188839503.910:68): user pid=3051 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_LOGIN msg=audit(1188839503.950:69): user pid=3051 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1188839506.107:70): user pid=3051 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188839506.107:71): user pid=3051 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188839506.109:72): login pid=3051 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1188839506.173:73): user pid=3051 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188839506.175:74): user pid=3051 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188839506.176:75): user pid=3051 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188839506.176:76): user pid=3051 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188840534.373:77): user pid=3051 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188840534.375:78): user pid=3051 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1188840537.962:79): user pid=4309 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1188840537.963:80): user pid=4309 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1188840537.965:81): login pid=4309 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1188840538.052:82): user pid=4309 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1188840538.054:83): user pid=4309 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1188840538.055:84): user pid=4309 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1188840538.055:85): user pid=4309 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1188840541.148:86): user pid=3050 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1188840541.152:87): user pid=4309 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188840541.163:88): user pid=4309 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1188840541.165:89): user pid=3050 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1188840542.603:90): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2829 comm="dhcdbd" sig=6
>type=AVC msg=audit(1188840547.751:91): avc:  denied  { read write } for  pid=4700 comm="modprobe" name="" dev=sockfs ino=24949 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188840547.751:91): avc:  denied  { read write } for  pid=4700 comm="modprobe" name="" dev=sockfs ino=24950 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188840547.751:91): arch=40000003 syscall=11 success=yes exit=0 a0=8067e08 a1=bf807d38 a2=bf80a610 a3=8067e08 items=0 ppid=4699 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188840547.751:91):  path="socket:[24950]"
>type=AVC_PATH msg=audit(1188840547.751:91):  path="socket:[24949]"
>type=ANOM_ABEND msg=audit(1188840549.025:92): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2086 comm="named" sig=6
>type=DAEMON_END msg=audit(1188840549.391:9668): auditd normal halt, sending auid=4294967295 pid=5101 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1981
>type=DAEMON_START msg=audit(1188842524.132:2820): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1888 res=success, auditd pid=1888
>type=CONFIG_CHANGE msg=audit(1188842524.232:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188842524.232:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188842524.485:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188842524.485:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188842531.429:9): avc:  denied  { read write } for  pid=2204 comm="modprobe" name="" dev=sockfs ino=9230 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188842531.429:9): avc:  denied  { read write } for  pid=2204 comm="modprobe" name="" dev=sockfs ino=9248 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188842531.429:9): arch=40000003 syscall=11 success=yes exit=0 a0=8be71d8 a1=bff82a68 a2=bff85ea0 a3=8be71d8 items=0 ppid=2164 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188842531.429:9):  path="socket:[9248]"
>type=AVC_PATH msg=audit(1188842531.429:9):  path="socket:[9230]"
>type=AVC msg=audit(1188842532.063:10): avc:  denied  { write } for  pid=2003 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188842532.063:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb6c980 a2=63a494 a3=0 items=0 ppid=1 pid=2003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188842547.477:11): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188842710.431:12): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188842710.434:13): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188842710.435:14): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188842710.440:15): login pid=2930 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188842710.460:16): user pid=2930 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188842710.462:17): user pid=2930 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188846061.684:18): user pid=3576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188849661.766:19): user pid=3764 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188853261.812:20): user pid=3936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188856861.859:21): user pid=4123 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188857504.123:22): user pid=4340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188857504.123:23): user pid=4340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188857504.218:24): user pid=4340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188857504.219:25): user pid=4340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188857505.484:26): user pid=4340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188857505.484:27): user pid=4340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188857512.880:28): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188857515.292:29): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188857515.292:30): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188857515.320:31): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188857515.322:32): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188857515.322:33): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188857515.330:34): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188857515.330:35): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188857515.344:36): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188857515.345:37): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188858547.022:38): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188858547.025:39): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188858973.557:40): user pid=4726 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188858973.558:41): user pid=4726 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188858973.592:42): user pid=4726 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188858973.594:43): user pid=4726 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188858973.594:44): user pid=4726 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188860461.961:45): user pid=4873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188860628.463:46): user pid=5044 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188860628.464:47): user pid=5044 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188860628.465:48): user pid=5044 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188860628.466:49): user pid=5044 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188860628.466:50): user pid=5044 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188860633.313:51): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188860633.313:52): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188860633.313:53): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188860633.373:54): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188860633.373:55): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188860633.389:56): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188860633.389:57): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188860669.086:58): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188860669.086:59): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188860731.162:60): user pid=2930 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188860731.162:61): user pid=2930 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188860735.131:62): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2568 comm="dhcdbd" sig=6
>type=AVC msg=audit(1188860742.183:63): avc:  denied  { read write } for  pid=5634 comm="modprobe" name="" dev=sockfs ino=483203 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188860742.183:63): avc:  denied  { read write } for  pid=5634 comm="modprobe" name="" dev=sockfs ino=483204 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188860742.183:63): arch=40000003 syscall=11 success=yes exit=0 a0=9a83e08 a1=bfc1a8a8 a2=bfc1d180 a3=9a83e08 items=0 ppid=5633 pid=5634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188860742.183:63):  path="socket:[483204]"
>type=AVC_PATH msg=audit(1188860742.183:63):  path="socket:[483203]"
>type=ANOM_ABEND msg=audit(1188860744.339:64): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1969 comm="named" sig=6
>type=DAEMON_END msg=audit(1188860746.802:2821): auditd normal halt, sending auid=4294967295 pid=6077 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1888
>type=DAEMON_START msg=audit(1188885871.705:5793): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1898 res=success, auditd pid=1898
>type=CONFIG_CHANGE msg=audit(1188885871.805:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188885871.805:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188885872.147:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188885872.147:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188885879.391:9): avc:  denied  { read write } for  pid=2216 comm="modprobe" name="" dev=sockfs ino=9505 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188885879.391:9): avc:  denied  { read write } for  pid=2216 comm="modprobe" name="" dev=sockfs ino=9517 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188885879.391:9): arch=40000003 syscall=11 success=yes exit=0 a0=9a031d8 a1=bfbda938 a2=bfbddd70 a3=9a031d8 items=0 ppid=2175 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188885879.391:9):  path="socket:[9517]"
>type=AVC_PATH msg=audit(1188885879.391:9):  path="socket:[9505]"
>type=AVC msg=audit(1188885879.397:10): avc:  denied  { write } for  pid=2013 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188885879.397:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8f3700 a2=63a494 a3=0 items=0 ppid=1 pid=2013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188885894.876:11): user pid=2844 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188885943.506:12): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188885944.510:13): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188885944.511:14): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188885944.515:15): login pid=2947 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188885944.536:16): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188885944.537:17): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1188888234.595:18): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188888234.596:19): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188888237.922:20): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2578 comm="dhcdbd" sig=6
>type=AVC msg=audit(1188888243.377:21): avc:  denied  { read write } for  pid=3894 comm="modprobe" name="" dev=sockfs ino=66322 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188888243.377:21): avc:  denied  { read write } for  pid=3894 comm="modprobe" name="" dev=sockfs ino=66323 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188888243.377:21): arch=40000003 syscall=11 success=yes exit=0 a0=91dbe08 a1=bfb2d868 a2=bfb30140 a3=91dbe08 items=0 ppid=3893 pid=3894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188888243.377:21):  path="socket:[66323]"
>type=AVC_PATH msg=audit(1188888243.377:21):  path="socket:[66322]"
>type=ANOM_ABEND msg=audit(1188888244.711:22): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1979 comm="named" sig=6
>type=DAEMON_END msg=audit(1188888245.099:5794): auditd normal halt, sending auid=4294967295 pid=4334 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1898
>type=DAEMON_START msg=audit(1188889066.144:4972): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1898 res=success, auditd pid=1898
>type=CONFIG_CHANGE msg=audit(1188889066.243:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188889066.243:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188889066.626:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188889066.626:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188889073.492:9): avc:  denied  { read write } for  pid=2214 comm="modprobe" name="" dev=sockfs ino=9541 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188889073.492:9): avc:  denied  { read write } for  pid=2214 comm="modprobe" name="" dev=sockfs ino=9551 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188889073.492:9): arch=40000003 syscall=11 success=yes exit=0 a0=91951d8 a1=bfe0e338 a2=bfe11770 a3=91951d8 items=0 ppid=2176 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188889073.492:9):  path="socket:[9551]"
>type=AVC_PATH msg=audit(1188889073.492:9):  path="socket:[9541]"
>type=AVC msg=audit(1188889073.964:10): avc:  denied  { write } for  pid=2013 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188889073.964:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfcb7ac0 a2=63a494 a3=0 items=0 ppid=1 pid=2013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188889089.432:11): user pid=2844 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188889103.672:12): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188889103.675:13): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188889103.675:14): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188889103.677:15): login pid=2940 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188889103.724:16): user pid=2940 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188889103.726:17): user pid=2940 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188889141.112:18): user pid=3268 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188889141.113:19): user pid=3268 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188889141.197:20): user pid=3268 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188889187.341:21): user pid=3268 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188889199.019:22): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188889199.019:23): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188889199.020:24): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188889199.022:25): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188889199.022:26): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188889199.061:27): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188889199.062:28): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188889199.097:29): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188889199.097:30): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1188889238.652:31): user pid=3402 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='op=adding group acct=fuse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1188889240.423:32): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188889240.424:33): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188889261.961:34): user pid=3410 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1188890367.499:35): user pid=3869 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1188890960.288:8510): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1930 res=success, auditd pid=1930
>type=CONFIG_CHANGE msg=audit(1188890960.389:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188890960.389:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188890960.636:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188890960.636:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188890967.234:9): avc:  denied  { read write } for  pid=2246 comm="modprobe" name="" dev=sockfs ino=9442 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188890967.234:9): avc:  denied  { read write } for  pid=2246 comm="modprobe" name="" dev=sockfs ino=9456 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188890967.234:9): arch=40000003 syscall=11 success=yes exit=0 a0=9d7d1d8 a1=bfed9948 a2=bfedcd80 a3=9d7d1d8 items=0 ppid=2207 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188890967.234:9):  path="socket:[9456]"
>type=AVC_PATH msg=audit(1188890967.234:9):  path="socket:[9442]"
>type=AVC msg=audit(1188890967.406:10): avc:  denied  { write } for  pid=2045 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188890967.406:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa6f080 a2=63a494 a3=0 items=0 ppid=1 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188890981.843:11): user pid=2878 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188890995.461:12): user pid=2969 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188890995.465:13): user pid=2969 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188890995.465:14): user pid=2969 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188890995.470:15): login pid=2969 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188890995.491:16): user pid=2969 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188890995.493:17): user pid=2969 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1188891095.994:18): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188891098.547:19): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188891098.547:20): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188891098.616:21): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188891177.465:22): user pid=3417 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188891177.466:23): user pid=3417 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1188891177.504:24): user pid=3417 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1188891227.991:25): user pid=3426 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188891227.991:26): user pid=3426 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1188891227.992:27): user pid=3426 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1188891227.997:28): user pid=3426 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1188891227.997:29): user pid=3426 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1188891231.197:30): user pid=3458 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188891231.197:31): user pid=3458 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1188891231.238:32): user pid=3458 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1188891322.416:33): user pid=3529 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188891322.416:34): user pid=3529 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1188891322.421:35): user pid=3529 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1188891342.186:36): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188891345.854:37): user pid=3529 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188891609.130:38): user pid=3618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188891609.130:39): user pid=3618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1188891609.132:40): user pid=3618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1188891609.138:41): user pid=3618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1188891609.138:42): user pid=3618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188892861.117:43): user pid=3702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_LOGIN msg=audit(1188892940.487:44): user pid=3715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.10, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1188892949.845:45): user pid=3715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1188892949.846:46): user pid=3715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1188892949.968:47): user pid=3715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=LOGIN msg=audit(1188892949.969:48): login pid=3715 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1188892949.970:49): user pid=3715 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1188892949.990:50): user pid=3717 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=/dev/pts/2 res=success)'
>type=CRED_REFR msg=audit(1188892949.991:51): user pid=3717 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1188892970.595:52): user pid=3715 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=USER_END msg=audit(1188892970.595:53): user pid=3715 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=USER_AUTH msg=audit(1188895856.405:54): user pid=8353 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1188895858.945:55): user pid=8353 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188895858.945:56): user pid=8353 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188895858.945:57): user pid=8353 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188895858.948:58): user pid=8353 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188895858.948:59): user pid=8353 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188895882.489:60): user pid=8355 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188895882.489:61): user pid=8355 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188895882.490:62): user pid=8355 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188895885.940:63): user pid=8356 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188895885.940:64): user pid=8356 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188895885.941:65): user pid=8356 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188895910.479:66): user pid=8359 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188895910.486:67): user pid=8359 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188895910.486:68): user pid=8359 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188896461.194:69): user pid=8554 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188896731.633:70): user pid=8650 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188896731.633:71): user pid=8650 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188896731.634:72): user pid=8650 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188896731.641:73): user pid=8650 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188896731.641:74): user pid=8650 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188896748.594:75): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188896748.594:75): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfddb988 a3=6 items=0 ppid=1 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1188897475.472:76): user pid=8830 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188897475.472:77): user pid=8830 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188897475.506:78): user pid=8830 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188897475.535:79): user pid=8830 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188897475.536:80): user pid=8830 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188897503.423:81): user pid=8864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188897503.423:82): user pid=8864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188897503.571:83): user pid=8864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188897692.937:84): user pid=8864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188897970.590:85): user pid=8940 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188897970.590:86): user pid=8940 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188897970.693:87): user pid=8940 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188898043.794:88): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1188898086.176:89): user pid=8974 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188898086.176:90): user pid=8974 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188898086.290:91): user pid=8974 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188898097.132:92): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1188898097.132:92): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfddb998 a3=6 items=0 ppid=1 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_ACCT msg=audit(1188900061.365:93): user pid=9315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188900760.134:94): user pid=9402 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1188900760.135:95): user pid=9402 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1188900760.193:96): user pid=9402 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1188900760.215:97): user pid=9402 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1188900760.215:98): user pid=9402 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1188901045.216:99): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_END msg=audit(1188901062.131:100): user pid=8974 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1188901771.530:101): avc:  denied  { execmod } for  pid=9647 comm="totem-video-thu" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188901771.530:101): arch=40000003 syscall=125 success=no exit=-13 a0=3e31000 a1=48000 a2=5 a3=bfa28070 items=0 ppid=3134 pid=9647 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188901771.530:101):  path="/usr/lib/libtheora.so.0.2.0"
>type=USER_ACCT msg=audit(1188903661.915:102): user pid=9754 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1188904975.737:103): avc:  denied  { execmod } for  pid=9938 comm="totem-video-thu" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188904975.737:103): arch=40000003 syscall=125 success=no exit=-13 a0=5de8000 a1=48000 a2=5 a3=bf909b50 items=0 ppid=3134 pid=9938 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188904975.737:103):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.160:104): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.160:104): arch=40000003 syscall=125 success=no exit=-13 a0=785b000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.160:104):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.168:105): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.168:105): arch=40000003 syscall=125 success=no exit=-13 a0=7fef000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.168:105):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.177:106): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.177:106): arch=40000003 syscall=125 success=no exit=-13 a0=640c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.177:106):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.191:107): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.191:107): arch=40000003 syscall=125 success=no exit=-13 a0=27ba000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.191:107):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.201:108): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.201:108): arch=40000003 syscall=125 success=no exit=-13 a0=1b0c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.201:108):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.210:109): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.210:109): arch=40000003 syscall=125 success=no exit=-13 a0=1c2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.210:109):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.218:110): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.218:110): arch=40000003 syscall=125 success=no exit=-13 a0=3eac000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.218:110):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.226:111): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.226:111): arch=40000003 syscall=125 success=no exit=-13 a0=650b000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.226:111):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.234:112): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.234:112): arch=40000003 syscall=125 success=no exit=-13 a0=2803000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.234:112):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.242:113): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.242:113): arch=40000003 syscall=125 success=no exit=-13 a0=7519000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.242:113):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.251:114): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.251:114): arch=40000003 syscall=125 success=no exit=-13 a0=203e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.251:114):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.259:115): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.259:115): arch=40000003 syscall=125 success=no exit=-13 a0=775f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.259:115):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.267:116): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.267:116): arch=40000003 syscall=125 success=no exit=-13 a0=1bc4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.267:116):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.275:117): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.275:117): arch=40000003 syscall=125 success=no exit=-13 a0=334f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.275:117):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.283:118): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.283:118): arch=40000003 syscall=125 success=no exit=-13 a0=203e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.283:118):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.291:119): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.291:119): arch=40000003 syscall=125 success=no exit=-13 a0=3f9c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.291:119):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.299:120): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.299:120): arch=40000003 syscall=125 success=no exit=-13 a0=40bc000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.299:120):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.307:121): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.307:121): arch=40000003 syscall=125 success=no exit=-13 a0=1ec4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.307:121):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.315:122): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.315:122): arch=40000003 syscall=125 success=no exit=-13 a0=1b68000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.315:122):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.323:123): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.323:123): arch=40000003 syscall=125 success=no exit=-13 a0=5f93000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.323:123):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.331:124): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.331:124): arch=40000003 syscall=125 success=no exit=-13 a0=1ec4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.331:124):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.339:125): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.339:125): arch=40000003 syscall=125 success=no exit=-13 a0=203e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.339:125):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.347:126): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.347:126): arch=40000003 syscall=125 success=no exit=-13 a0=1f12000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.347:126):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.355:127): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.355:127): arch=40000003 syscall=125 success=no exit=-13 a0=5ee0000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.355:127):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.364:128): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.364:128): arch=40000003 syscall=125 success=no exit=-13 a0=2a59000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.364:128):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.371:129): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.371:129): arch=40000003 syscall=125 success=no exit=-13 a0=1b5e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.371:129):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.379:130): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.379:130): arch=40000003 syscall=125 success=no exit=-13 a0=2b7a000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.379:130):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.387:131): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.387:131): arch=40000003 syscall=125 success=no exit=-13 a0=60f3000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.387:131):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.414:132): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.414:132): arch=40000003 syscall=125 success=no exit=-13 a0=1f39000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.414:132):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.425:133): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.425:133): arch=40000003 syscall=125 success=no exit=-13 a0=2506000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.425:133):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.435:134): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.435:134): arch=40000003 syscall=125 success=no exit=-13 a0=1b29000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.435:134):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.444:135): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.444:135): arch=40000003 syscall=125 success=no exit=-13 a0=1ff7000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.444:135):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.452:136): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.452:136): arch=40000003 syscall=125 success=no exit=-13 a0=5ce0000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.452:136):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.460:137): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.460:137): arch=40000003 syscall=125 success=no exit=-13 a0=3237000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.460:137):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.468:138): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.468:138): arch=40000003 syscall=125 success=no exit=-13 a0=40c3000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.468:138):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.476:139): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.476:139): arch=40000003 syscall=125 success=no exit=-13 a0=22ea000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.476:139):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.484:140): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.484:140): arch=40000003 syscall=125 success=no exit=-13 a0=1fa3000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.484:140):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.492:141): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.492:141): arch=40000003 syscall=125 success=no exit=-13 a0=203e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.492:141):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.505:142): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.505:142): arch=40000003 syscall=125 success=no exit=-13 a0=6fed000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.505:142):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.527:143): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.527:143): arch=40000003 syscall=125 success=no exit=-13 a0=7044000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.527:143):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.541:144): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.541:144): arch=40000003 syscall=125 success=no exit=-13 a0=615d000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.541:144):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.549:145): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.549:145): arch=40000003 syscall=125 success=no exit=-13 a0=282b000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.549:145):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.557:146): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.557:146): arch=40000003 syscall=125 success=no exit=-13 a0=44f8000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.557:146):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.566:147): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.566:147): arch=40000003 syscall=125 success=no exit=-13 a0=203c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.566:147):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.575:148): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.575:148): arch=40000003 syscall=125 success=no exit=-13 a0=5c65000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.575:148):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.591:149): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.591:149): arch=40000003 syscall=125 success=no exit=-13 a0=1b5e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.591:149):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905130.613:150): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905130.613:150): arch=40000003 syscall=125 success=no exit=-13 a0=1b58000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905130.613:150):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.681:151): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.681:151): arch=40000003 syscall=125 success=no exit=-13 a0=6dc7000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.681:151):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.697:152): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.697:152): arch=40000003 syscall=125 success=no exit=-13 a0=7766000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.697:152):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.705:153): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.705:153): arch=40000003 syscall=125 success=no exit=-13 a0=2897000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.705:153):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.713:154): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.713:154): arch=40000003 syscall=125 success=no exit=-13 a0=1f5c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.713:154):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.721:155): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.721:155): arch=40000003 syscall=125 success=no exit=-13 a0=1f03000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.721:155):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.729:156): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.729:156): arch=40000003 syscall=125 success=no exit=-13 a0=72fe000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.729:156):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.737:157): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.737:157): arch=40000003 syscall=125 success=no exit=-13 a0=6504000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.737:157):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.745:158): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.745:158): arch=40000003 syscall=125 success=no exit=-13 a0=1b6f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.745:158):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.753:159): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.753:159): arch=40000003 syscall=125 success=no exit=-13 a0=23ec000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.753:159):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.762:160): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.762:160): arch=40000003 syscall=125 success=no exit=-13 a0=4872000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.762:160):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.770:161): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.770:161): arch=40000003 syscall=125 success=no exit=-13 a0=241e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.770:161):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.778:162): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.778:162): arch=40000003 syscall=125 success=no exit=-13 a0=7899000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.778:162):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.786:163): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.786:163): arch=40000003 syscall=125 success=no exit=-13 a0=21ad000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.786:163):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.794:164): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.794:164): arch=40000003 syscall=125 success=no exit=-13 a0=1f87000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.794:164):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.802:165): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.802:165): arch=40000003 syscall=125 success=no exit=-13 a0=298e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.802:165):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.810:166): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.810:166): arch=40000003 syscall=125 success=no exit=-13 a0=1ab4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.810:166):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.818:167): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.818:167): arch=40000003 syscall=125 success=no exit=-13 a0=218f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.818:167):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.826:168): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.826:168): arch=40000003 syscall=125 success=no exit=-13 a0=6698000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.826:168):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.834:169): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.834:169): arch=40000003 syscall=125 success=no exit=-13 a0=1fe0000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.834:169):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.842:170): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.842:170): arch=40000003 syscall=125 success=no exit=-13 a0=659f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.842:170):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.850:171): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.850:171): arch=40000003 syscall=125 success=no exit=-13 a0=75bf000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.850:171):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.859:172): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.859:172): arch=40000003 syscall=125 success=no exit=-13 a0=2a3a000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.859:172):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.867:173): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.867:173): arch=40000003 syscall=125 success=no exit=-13 a0=40bd000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.867:173):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.875:174): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.875:174): arch=40000003 syscall=125 success=no exit=-13 a0=1b1e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.875:174):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.883:175): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.883:175): arch=40000003 syscall=125 success=no exit=-13 a0=2410000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.883:175):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.891:176): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.891:176): arch=40000003 syscall=125 success=no exit=-13 a0=2de4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.891:176):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.899:177): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.899:177): arch=40000003 syscall=125 success=no exit=-13 a0=1fd4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.899:177):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.907:178): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.907:178): arch=40000003 syscall=125 success=no exit=-13 a0=415e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.907:178):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.915:179): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.915:179): arch=40000003 syscall=125 success=no exit=-13 a0=4869000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.915:179):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.923:180): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.923:180): arch=40000003 syscall=125 success=no exit=-13 a0=201b000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.923:180):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.931:181): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.931:181): arch=40000003 syscall=125 success=no exit=-13 a0=1c2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.931:181):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.940:182): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.940:182): arch=40000003 syscall=125 success=no exit=-13 a0=1b08000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.940:182):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.948:183): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.948:183): arch=40000003 syscall=125 success=no exit=-13 a0=3e9c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.948:183):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.956:184): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.956:184): arch=40000003 syscall=125 success=no exit=-13 a0=69c0000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.956:184):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.964:185): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.964:185): arch=40000003 syscall=125 success=no exit=-13 a0=1c2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.964:185):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.972:186): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.972:186): arch=40000003 syscall=125 success=no exit=-13 a0=1ab4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.972:186):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.980:187): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.980:187): arch=40000003 syscall=125 success=no exit=-13 a0=7a9c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.980:187):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.988:188): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.988:188): arch=40000003 syscall=125 success=no exit=-13 a0=217f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.988:188):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905135.996:189): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905135.996:189): arch=40000003 syscall=125 success=no exit=-13 a0=1bc4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905135.996:189):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.004:190): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.004:190): arch=40000003 syscall=125 success=no exit=-13 a0=45f9000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.004:190):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.012:191): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.012:191): arch=40000003 syscall=125 success=no exit=-13 a0=1bc4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.012:191):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.021:192): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.021:192): arch=40000003 syscall=125 success=no exit=-13 a0=7551000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.021:192):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.028:193): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.028:193): arch=40000003 syscall=125 success=no exit=-13 a0=1b2f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.028:193):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.036:194): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.036:194): arch=40000003 syscall=125 success=no exit=-13 a0=76db000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.036:194):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.045:195): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.045:195): arch=40000003 syscall=125 success=no exit=-13 a0=1f2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.045:195):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.052:196): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.052:196): arch=40000003 syscall=125 success=no exit=-13 a0=7325000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.052:196):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.061:197): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.061:197): arch=40000003 syscall=125 success=no exit=-13 a0=6bd8000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.061:197):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.198:198): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.198:198): arch=40000003 syscall=125 success=no exit=-13 a0=1f6e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.198:198):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.206:199): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.206:199): arch=40000003 syscall=125 success=no exit=-13 a0=1f2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.206:199):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.214:200): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.214:200): arch=40000003 syscall=125 success=no exit=-13 a0=1d91000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.214:200):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.222:201): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.222:201): arch=40000003 syscall=125 success=no exit=-13 a0=5da9000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.222:201):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.230:202): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.230:202): arch=40000003 syscall=125 success=no exit=-13 a0=4331000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.230:202):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.238:203): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.238:203): arch=40000003 syscall=125 success=no exit=-13 a0=1f03000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.238:203):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.246:204): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.246:204): arch=40000003 syscall=125 success=no exit=-13 a0=4ee4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.246:204):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.254:205): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.254:205): arch=40000003 syscall=125 success=no exit=-13 a0=2ceb000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.254:205):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.262:206): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.262:206): arch=40000003 syscall=125 success=no exit=-13 a0=31a6000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.262:206):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.270:207): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.270:207): arch=40000003 syscall=125 success=no exit=-13 a0=1b88000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.270:207):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.278:208): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.278:208): arch=40000003 syscall=125 success=no exit=-13 a0=7fa9000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.278:208):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.286:209): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.286:209): arch=40000003 syscall=125 success=no exit=-13 a0=2c5b000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.286:209):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.294:210): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.294:210): arch=40000003 syscall=125 success=no exit=-13 a0=7188000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.294:210):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.302:211): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.302:211): arch=40000003 syscall=125 success=no exit=-13 a0=1ad7000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.302:211):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.310:212): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.310:212): arch=40000003 syscall=125 success=no exit=-13 a0=203e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.310:212):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.318:213): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.318:213): arch=40000003 syscall=125 success=no exit=-13 a0=1fa3000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.318:213):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.326:214): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.326:214): arch=40000003 syscall=125 success=no exit=-13 a0=2695000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.326:214):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.334:215): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.334:215): arch=40000003 syscall=125 success=no exit=-13 a0=203e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.334:215):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.343:216): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.343:216): arch=40000003 syscall=125 success=no exit=-13 a0=1f6e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.343:216):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.351:217): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.351:217): arch=40000003 syscall=125 success=no exit=-13 a0=2f03000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.351:217):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.359:218): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.359:218): arch=40000003 syscall=125 success=no exit=-13 a0=1b93000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.359:218):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.367:219): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.367:219): arch=40000003 syscall=125 success=no exit=-13 a0=1ad0000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.367:219):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.375:220): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.375:220): arch=40000003 syscall=125 success=no exit=-13 a0=1fd4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.375:220):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.383:221): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.383:221): arch=40000003 syscall=125 success=no exit=-13 a0=1b29000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.383:221):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.391:222): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.391:222): arch=40000003 syscall=125 success=no exit=-13 a0=1f64000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.391:222):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.400:223): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.400:223): arch=40000003 syscall=125 success=no exit=-13 a0=1fd4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.400:223):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.408:224): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.408:224): arch=40000003 syscall=125 success=no exit=-13 a0=7f9a000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.408:224):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.416:225): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.416:225): arch=40000003 syscall=125 success=no exit=-13 a0=6dcb000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.416:225):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.427:226): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.427:226): arch=40000003 syscall=125 success=no exit=-13 a0=1f2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.427:226):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.435:227): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.435:227): arch=40000003 syscall=125 success=no exit=-13 a0=6b95000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.435:227):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.444:228): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.444:228): arch=40000003 syscall=125 success=no exit=-13 a0=1f28000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.444:228):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.452:229): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.452:229): arch=40000003 syscall=125 success=no exit=-13 a0=1b1e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.452:229):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.460:230): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.460:230): arch=40000003 syscall=125 success=no exit=-13 a0=6eb3000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.460:230):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.468:231): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.468:231): arch=40000003 syscall=125 success=no exit=-13 a0=6ca4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.468:231):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.476:232): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.476:232): arch=40000003 syscall=125 success=no exit=-13 a0=681d000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.476:232):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.484:233): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.484:233): arch=40000003 syscall=125 success=no exit=-13 a0=1c2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.484:233):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.492:234): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.492:234): arch=40000003 syscall=125 success=no exit=-13 a0=4b79000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.492:234):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.500:235): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.500:235): arch=40000003 syscall=125 success=no exit=-13 a0=1c2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.500:235):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.508:236): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.508:236): arch=40000003 syscall=125 success=no exit=-13 a0=44dc000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.508:236):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.517:237): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.517:237): arch=40000003 syscall=125 success=no exit=-13 a0=1c12000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.517:237):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.525:238): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.525:238): arch=40000003 syscall=125 success=no exit=-13 a0=66e7000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.525:238):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.533:239): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.533:239): arch=40000003 syscall=125 success=no exit=-13 a0=1c01000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.533:239):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.541:240): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.541:240): arch=40000003 syscall=125 success=no exit=-13 a0=1b1e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.541:240):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.549:241): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.549:241): arch=40000003 syscall=125 success=no exit=-13 a0=20ce000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.549:241):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.557:242): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.557:242): arch=40000003 syscall=125 success=no exit=-13 a0=1ffa000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.557:242):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.565:243): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.565:243): arch=40000003 syscall=125 success=no exit=-13 a0=64a4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.565:243):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188905136.573:244): avc:  denied  { execmod } for  pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188905136.573:244): arch=40000003 syscall=125 success=no exit=-13 a0=1bf3000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188905136.573:244):  path="/usr/lib/libtheora.so.0.2.0"
>type=USER_AUTH msg=audit(1188905355.971:245): user pid=10191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188905355.972:246): user pid=10191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1188905355.993:247): user pid=10191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1188905355.999:248): user pid=10191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1188905355.999:249): user pid=10191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1188907261.605:250): user pid=10395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188910861.856:251): user pid=10886 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188911750.979:252): user pid=11111 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188911750.979:253): user pid=11111 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188911751.020:254): user pid=11111 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188911751.031:255): user pid=11111 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188911751.031:256): user pid=11111 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1188911892.990:257): avc:  denied  { execmod } for  pid=11265 comm="totem-video-thu" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188911892.990:257): arch=40000003 syscall=125 success=no exit=-13 a0=108d000 a1=48000 a2=5 a3=bfae3ee0 items=0 ppid=3134 pid=11265 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188911892.990:257):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188911894.261:258): avc:  denied  { execmod } for  pid=11273 comm="totem-video-thu" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188911894.261:258): arch=40000003 syscall=125 success=no exit=-13 a0=53af000 a1=48000 a2=5 a3=bfad3d10 items=0 ppid=3134 pid=11273 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188911894.261:258):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188911981.457:259): avc:  denied  { execmod } for  pid=11380 comm="totem" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188911981.457:259): arch=40000003 syscall=125 success=no exit=-13 a0=1aaa000 a1=48000 a2=5 a3=bfe8b290 items=0 ppid=11284 pid=11380 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="totem" exe="/usr/bin/totem" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188911981.457:259):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188912982.625:260): avc:  denied  { execmod } for  pid=11646 comm="totem" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188912982.625:260): arch=40000003 syscall=125 success=no exit=-13 a0=1aa5000 a1=48000 a2=5 a3=b64db880 items=0 ppid=11528 pid=11646 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="totem" exe="/usr/bin/totem" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188912982.625:260):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188912983.073:261): avc:  denied  { execmod } for  pid=11646 comm="totem" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188912983.073:261): arch=40000003 syscall=125 success=no exit=-13 a0=6c67000 a1=48000 a2=5 a3=b64db360 items=0 ppid=11528 pid=11646 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="totem" exe="/usr/bin/totem" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188912983.073:261):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188912983.195:262): avc:  denied  { execmod } for  pid=11646 comm="totem" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188912983.195:262): arch=40000003 syscall=125 success=no exit=-13 a0=1077000 a1=48000 a2=5 a3=b64db360 items=0 ppid=11528 pid=11646 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="totem" exe="/usr/bin/totem" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188912983.195:262):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188913019.258:263): avc:  denied  { execmod } for  pid=11656 comm="gst-launch-0.10" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188913019.258:263): arch=40000003 syscall=125 success=no exit=-13 a0=594d000 a1=48000 a2=5 a3=bf863430 items=0 ppid=11655 pid=11656 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-launch-0.10" exe="/usr/bin/gst-launch-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188913019.258:263):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188913019.838:264): avc:  denied  { execmod } for  pid=11656 comm="gst-launch-0.10" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188913019.838:264): arch=40000003 syscall=125 success=no exit=-13 a0=7858000 a1=48000 a2=5 a3=bf863430 items=0 ppid=11655 pid=11656 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-launch-0.10" exe="/usr/bin/gst-launch-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188913019.838:264):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188913020.293:265): avc:  denied  { execmod } for  pid=11656 comm="gst-launch-0.10" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188913020.293:265): arch=40000003 syscall=125 success=no exit=-13 a0=4f72000 a1=48000 a2=5 a3=bf863430 items=0 ppid=11655 pid=11656 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-launch-0.10" exe="/usr/bin/gst-launch-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188913020.293:265):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188913020.661:266): avc:  denied  { execmod } for  pid=11656 comm="gst-launch-0.10" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188913020.661:266): arch=40000003 syscall=125 success=no exit=-13 a0=2e98000 a1=48000 a2=5 a3=bf863430 items=0 ppid=11655 pid=11656 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-launch-0.10" exe="/usr/bin/gst-launch-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188913020.661:266):  path="/usr/lib/libtheora.so.0.2.0"
>type=AVC msg=audit(1188913715.992:267): avc:  denied  { execmod } for  pid=11814 comm="totem" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188913715.992:267): arch=40000003 syscall=125 success=no exit=-13 a0=1008000 a1=48000 a2=5 a3=bfd465f0 items=0 ppid=11528 pid=11814 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="totem" exe="/usr/bin/totem" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188913715.992:267):  path="/usr/lib/libtheora.so.0.2.0"
>type=USER_AUTH msg=audit(1188913809.476:268): user pid=11831 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188913809.476:269): user pid=11831 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188913809.612:270): user pid=11831 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1188914048.757:271): avc:  denied  { execmod } for  pid=11865 comm="totem" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1188914048.757:271): arch=40000003 syscall=125 success=no exit=-13 a0=5412000 a1=48000 a2=5 a3=bff81820 items=0 ppid=11528 pid=11865 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="totem" exe="/usr/bin/totem" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188914048.757:271):  path="/usr/lib/libtheora.so.0.2.0"
>type=USER_AUTH msg=audit(1188914267.988:272): user pid=11932 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188914267.989:273): user pid=11932 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188914268.013:274): user pid=11932 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188914268.019:275): user pid=11932 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188914268.019:276): user pid=11932 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1188914304.569:277): avc:  denied  { write } for  pid=11981 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188914304.569:277): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfcd5000 a2=63a494 a3=0 items=0 ppid=1 pid=11981 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=user_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1188914461.973:278): user pid=12008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1188914581.289:279): user pid=11831 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188914842.981:280): user pid=12063 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188914842.981:281): user pid=12063 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188914842.982:282): user pid=12063 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188914842.987:283): user pid=12063 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188914842.987:284): user pid=12063 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=MAC_CONFIG_CHANGE msg=audit(1188914896.887:285): bool=allow_execmod val=1 old_val=0 auid=500
>type=SYSCALL msg=audit(1188914896.887:285): arch=40000003 syscall=4 success=yes exit=2 a0=4 a1=bfc92366 a2=2 a3=bfc92368 items=0 ppid=12063 pid=12096 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="setsebool" exe="/usr/sbin/setsebool" subj=user_u:system_r:semanage_t:s0 key=(null)
>type=USER_AVC msg=audit(1188914897.014:286): user pid=8439 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1188914897.039:287): user pid=8874 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1188914897.119:288): user pid=2125 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=CRED_ACQ msg=audit(1188914937.176:289): user pid=12114 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188914937.182:290): user pid=12114 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188914937.182:291): user pid=12114 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188917636.867:292): user pid=12513 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188917636.867:293): user pid=12513 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188917636.890:294): user pid=12513 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188917636.891:295): user pid=12513 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188917636.891:296): user pid=12513 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188918061.096:297): user pid=12555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188919304.134:298): user pid=12761 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188919304.134:299): user pid=12761 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188919304.169:300): user pid=12761 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1188919309.989:301): user pid=12761 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188920554.400:302): user pid=12898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188920554.401:303): user pid=12898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188920554.401:304): user pid=12898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188920554.409:305): user pid=12898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188920554.409:306): user pid=12898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188920566.864:307): user pid=12957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188920566.864:308): user pid=12957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188920566.915:309): user pid=12957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188920698.866:310): user pid=12957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188921231.831:311): user pid=13101 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1188921231.831:312): user pid=13101 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1188921239.209:313): user pid=13103 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188921239.209:314): user pid=13103 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188921249.120:315): user pid=13106 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188921249.120:316): user pid=13106 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1188921255.987:317): user pid=13108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188921255.987:318): user pid=13108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USYS_CONFIG msg=audit(1188921260.500:319): user pid=13228 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1188921343.443:2086): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1920 res=success, auditd pid=1920
>type=CONFIG_CHANGE msg=audit(1188921343.543:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188921343.543:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188921343.618:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188921343.618:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188921350.629:9): avc:  denied  { read write } for  pid=2238 comm="modprobe" name="" dev=sockfs ino=9584 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188921350.629:9): avc:  denied  { read write } for  pid=2238 comm="modprobe" name="" dev=sockfs ino=9594 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188921350.629:9): arch=40000003 syscall=11 success=yes exit=0 a0=93f41d8 a1=bfc4a858 a2=bfc4dc90 a3=93f41d8 items=0 ppid=2199 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188921350.629:9):  path="socket:[9594]"
>type=AVC_PATH msg=audit(1188921350.629:9):  path="socket:[9584]"
>type=AVC msg=audit(1188921350.814:10): avc:  denied  { write } for  pid=2035 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188921350.814:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa46050 a2=63a494 a3=0 items=0 ppid=1 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188921366.299:11): user pid=2868 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188921368.036:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2751 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188921383.436:13): user pid=2977 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188921383.440:14): user pid=2977 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188921383.441:15): user pid=2977 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188921383.445:16): login pid=2977 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188921383.465:17): user pid=2977 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188921383.467:18): user pid=2977 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188921661.137:19): user pid=3539 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188921690.426:20): user pid=3577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188921690.427:21): user pid=3577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188921690.429:22): user pid=3577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188921690.434:23): user pid=3577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188921690.434:24): user pid=3577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188922341.970:25): user pid=3734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188922341.970:26): user pid=3734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188922341.971:27): user pid=3734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188922341.974:28): user pid=3734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188922341.974:29): user pid=3734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188922384.121:30): user pid=4112 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188922384.122:31): user pid=4112 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1188922387.499:32): user pid=4230 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1188928734.864:1303): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1927 res=success, auditd pid=1927
>type=CONFIG_CHANGE msg=audit(1188928734.964:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188928734.964:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188928735.020:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188928735.020:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188928742.409:9): avc:  denied  { write } for  pid=2042 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188928742.409:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf978780 a2=63a494 a3=0 items=0 ppid=1 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1188928742.642:10): avc:  denied  { read write } for  pid=2245 comm="modprobe" name="" dev=sockfs ino=9510 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188928742.642:10): avc:  denied  { read write } for  pid=2245 comm="modprobe" name="" dev=sockfs ino=9520 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188928742.642:10): arch=40000003 syscall=11 success=yes exit=0 a0=991f1d8 a1=bff516c8 a2=bff54b00 a3=991f1d8 items=0 ppid=2204 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188928742.642:10):  path="socket:[9520]"
>type=AVC_PATH msg=audit(1188928742.642:10):  path="socket:[9510]"
>type=ANOM_ABEND msg=audit(1188928756.969:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2743 comm="hald-addon-acpi" sig=11
>type=USER_ERR msg=audit(1188928758.589:12): user pid=2875 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1188928828.968:13): user pid=2976 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188928828.973:14): user pid=2976 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188928828.974:15): user pid=2976 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188928828.978:16): login pid=2976 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188928828.989:17): user pid=2976 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188928828.990:18): user pid=2976 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188928862.406:19): user pid=3340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1188928934.632:20): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3497 comm="telepathy-idle" sig=6
>type=USER_ACCT msg=audit(1188932461.687:21): user pid=3959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188934351.983:22): user pid=4068 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188934351.984:23): user pid=4068 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188934351.985:24): user pid=4068 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188934351.992:25): user pid=4068 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188934351.992:26): user pid=4068 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188934552.061:27): user pid=2976 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1188934552.062:28): user pid=2976 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1188934555.462:29): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2607 comm="dhcdbd" sig=6
>type=AVC msg=audit(1188934560.863:30): avc:  denied  { read write } for  pid=5870 comm="modprobe" name="" dev=sockfs ino=169428 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188934560.863:30): avc:  denied  { read write } for  pid=5870 comm="modprobe" name="" dev=sockfs ino=169429 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188934560.863:30): arch=40000003 syscall=11 success=yes exit=0 a0=8142e08 a1=bfcfda38 a2=bfd00310 a3=8142e08 items=0 ppid=5869 pid=5870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188934560.863:30):  path="socket:[169429]"
>type=AVC_PATH msg=audit(1188934560.863:30):  path="socket:[169428]"
>type=ANOM_ABEND msg=audit(1188934562.278:31): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2008 comm="named" sig=6
>type=DAEMON_END msg=audit(1188934562.674:1304): auditd normal halt, sending auid=4294967295 pid=6310 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1927
>type=DAEMON_START msg=audit(1188934841.538:981): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1895 res=success, auditd pid=1895
>type=CONFIG_CHANGE msg=audit(1188934841.641:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188934841.641:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1188934842.021:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1188934842.021:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1188934849.212:9): avc:  denied  { read write } for  pid=2212 comm="modprobe" name="" dev=sockfs ino=9241 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1188934849.212:9): avc:  denied  { read write } for  pid=2212 comm="modprobe" name="" dev=sockfs ino=9251 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1188934849.212:9): arch=40000003 syscall=11 success=yes exit=0 a0=8ff61d8 a1=bf9ddac8 a2=bf9e0f00 a3=8ff61d8 items=0 ppid=2172 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1188934849.212:9):  path="socket:[9251]"
>type=AVC_PATH msg=audit(1188934849.212:9):  path="socket:[9241]"
>type=AVC msg=audit(1188934849.499:10): avc:  denied  { write } for  pid=2010 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1188934849.499:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfdfbb10 a2=63a494 a3=0 items=0 ppid=1 pid=2010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1188934865.394:11): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1188934869.879:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2730 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1188934903.108:13): user pid=2951 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1188934903.112:14): user pid=2951 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1188934903.113:15): user pid=2951 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1188934903.117:16): login pid=2951 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1188934903.164:17): user pid=2951 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1188934903.164:18): user pid=2951 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USYS_CONFIG msg=audit(1188935304.499:19): user pid=3782 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1188935383.161:20): user pid=3895 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1188935434.045:21): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1188935434.046:22): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1188935434.077:23): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188935434.093:24): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188935434.093:25): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1188935521.978:26): user pid=4145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188935521.978:27): user pid=4145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1188935522.074:28): user pid=4145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1188935573.059:29): user pid=4187 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188935573.061:30): user pid=4187 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188935573.062:31): user pid=4187 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188935599.585:32): user pid=4145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1188935608.843:33): user pid=4190 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1188935608.848:34): user pid=4190 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1188935608.848:35): user pid=4190 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1188935917.499:36): user pid=4474 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1188937433.610:37): user pid=4595 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188939661.179:38): user pid=4963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1188943261.758:39): user pid=5443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1188943505.499:40): user pid=5614 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1188990406.748:41): user pid=5725 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1188993661.715:42): user pid=6010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1188993902.497:43): user pid=6053 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1188993902.498:44): user pid=6053 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1188993902.519:45): user pid=6053 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1188993902.539:46): user pid=6053 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1188993902.539:47): user pid=6053 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USYS_CONFIG msg=audit(1188994899.500:48): user pid=6299 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189002239.617:49): user pid=6425 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189002319.421:50): user pid=6645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189002319.421:51): user pid=6645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189002319.423:52): user pid=6645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189002319.453:53): user pid=6645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189002319.453:54): user pid=6645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189002783.754:55): user pid=6783 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_AUTH msg=audit(1189002785.860:56): user pid=6783 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189002785.860:57): user pid=6783 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189002785.861:58): user pid=6783 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189002785.865:59): user pid=6783 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189002785.866:60): user pid=6783 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=DAEMON_END msg=audit(1189004162.068:982): auditd normal halt, sending auid=500 pid=6986 subj=user_u:system_r:initrc_t:s0 res=success, auditd pid=1895
>type=DAEMON_START msg=audit(1189004162.308:8283): auditd start, ver=1.5.6, format=raw, auid=500 pid=7002 res=success, auditd pid=7002
>type=CONFIG_CHANGE msg=audit(1189004162.409:64): audit_enabled=1 old=1 by auid=500 subj=user_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189004162.409:65): audit_enabled=1 old=1 by auid=500 res=1
>type=CONFIG_CHANGE msg=audit(1189004162.417:66): audit_backlog_limit=320 old=320 by auid=500 subj=user_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189004162.417:67): audit_backlog_limit=320 old=320 by auid=500 res=1
>type=ANOM_ABEND msg=audit(1189004165.192:68): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1976 comm="named" sig=6
>type=USER_ACCT msg=audit(1189004461.892:69): user pid=7129 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1189004750.500:70): user pid=7264 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189011219.195:71): user pid=7387 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189011276.407:72): user pid=7606 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189011276.407:73): user pid=7606 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189011276.444:74): user pid=7606 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189011276.466:75): user pid=7606 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189011276.466:76): user pid=7606 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189011397.581:77): user pid=8018 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189011397.581:78): user pid=8018 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189011397.582:79): user pid=8018 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189011397.589:80): user pid=8018 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189011397.589:81): user pid=8018 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189011441.943:82): user pid=2951 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189011441.943:83): user pid=2951 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189011446.038:84): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2576 comm="dhcdbd" sig=6
>type=AVC msg=audit(1189011459.865:85): avc:  denied  { read write } for  pid=8654 comm="modprobe" name="" dev=sockfs ino=352928 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189011459.865:85): avc:  denied  { read write } for  pid=8654 comm="modprobe" name="" dev=sockfs ino=352929 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189011459.865:85): arch=40000003 syscall=11 success=yes exit=0 a0=8f98e08 a1=bf9fb738 a2=bf9fe010 a3=8f98e08 items=0 ppid=8653 pid=8654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189011459.865:85):  path="socket:[352929]"
>type=AVC_PATH msg=audit(1189011459.865:85):  path="socket:[352928]"
>type=DAEMON_END msg=audit(1189011464.215:8284): auditd normal halt, sending auid=4294967295 pid=9097 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=7002
>type=DAEMON_START msg=audit(1189011580.781:3697): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1904 res=success, auditd pid=1904
>type=CONFIG_CHANGE msg=audit(1189011580.881:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189011580.881:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189011581.166:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189011581.166:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189011588.804:9): avc:  denied  { read write } for  pid=2223 comm="modprobe" name="" dev=sockfs ino=9398 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189011588.804:9): avc:  denied  { read write } for  pid=2223 comm="modprobe" name="" dev=sockfs ino=9408 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189011588.804:9): arch=40000003 syscall=11 success=yes exit=0 a0=8be51d8 a1=bf8baaa8 a2=bf8bdee0 a3=8be51d8 items=0 ppid=2183 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189011588.804:9):  path="socket:[9408]"
>type=AVC_PATH msg=audit(1189011588.804:9):  path="socket:[9398]"
>type=AVC msg=audit(1189011589.047:10): avc:  denied  { write } for  pid=2019 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189011589.047:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8e5ef0 a2=63a494 a3=0 items=0 ppid=1 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1189011603.542:11): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1189011661.889:12): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189011758.313:13): user pid=2960 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189011758.317:14): user pid=2960 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189011758.317:15): user pid=2960 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189011758.322:16): login pid=2960 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189011758.331:17): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189011758.332:18): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1189011940.974:19): user pid=3343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189011940.974:20): user pid=3343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189011940.975:21): user pid=3343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189011940.981:22): user pid=3343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189011940.981:23): user pid=3343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189012429.044:24): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189012429.044:25): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189012432.321:26): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2587 comm="dhcdbd" sig=6
>type=AVC msg=audit(1189012437.866:27): avc:  denied  { read write } for  pid=3892 comm="modprobe" name="" dev=sockfs ino=30258 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189012437.866:27): avc:  denied  { read write } for  pid=3892 comm="modprobe" name="" dev=sockfs ino=30259 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189012437.866:27): arch=40000003 syscall=11 success=yes exit=0 a0=9099e08 a1=bfbc9d58 a2=bfbcc630 a3=9099e08 items=0 ppid=3891 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189012437.866:27):  path="socket:[30259]"
>type=AVC_PATH msg=audit(1189012437.866:27):  path="socket:[30258]"
>type=ANOM_ABEND msg=audit(1189012439.182:28): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1985 comm="named" sig=6
>type=DAEMON_END msg=audit(1189012439.525:3698): auditd normal halt, sending auid=4294967295 pid=4332 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1904
>type=DAEMON_START msg=audit(1189012862.782:6531): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1897 res=success, auditd pid=1897
>type=CONFIG_CHANGE msg=audit(1189012862.882:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189012862.882:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189012863.114:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189012863.114:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189012870.504:9): avc:  denied  { read write } for  pid=2213 comm="modprobe" name="" dev=sockfs ino=9451 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189012870.504:9): avc:  denied  { read write } for  pid=2213 comm="modprobe" name="" dev=sockfs ino=9461 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189012870.504:9): arch=40000003 syscall=11 success=yes exit=0 a0=9af11d8 a1=bfd12c88 a2=bfd160c0 a3=9af11d8 items=0 ppid=2174 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189012870.504:9):  path="socket:[9461]"
>type=AVC_PATH msg=audit(1189012870.504:9):  path="socket:[9451]"
>type=AVC msg=audit(1189012870.599:10): avc:  denied  { write } for  pid=2012 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275161 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189012870.599:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfe3d450 a2=63a494 a3=0 items=0 ppid=1 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1189012885.178:11): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189012885.416:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2726 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189012907.256:13): user pid=2939 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189012907.259:14): user pid=2939 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189012907.260:15): user pid=2939 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189012907.265:16): login pid=2939 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189012907.285:17): user pid=2939 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189012907.287:18): user pid=2939 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189015261.527:19): user pid=3415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189015507.814:20): user pid=3425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1189015525.430:21): user pid=3425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189015525.430:22): user pid=3425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189015525.503:23): user pid=3425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1189015581.707:24): user pid=3425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189016474.499:25): user pid=3641 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189016699.759:26): user pid=3789 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189018862.053:27): user pid=7501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189018920.637:28): user pid=7539 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189018920.638:29): user pid=7539 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189018920.687:30): user pid=7539 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189018920.695:31): user pid=7539 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189018920.695:32): user pid=7539 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189022461.968:33): user pid=8188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189023121.289:34): user pid=8261 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189023121.289:35): user pid=8261 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189023121.316:36): user pid=8261 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189023121.328:37): user pid=8261 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189023121.329:38): user pid=8261 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1189024910.787:39): user pid=8429 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189024910.787:40): user pid=8429 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189024910.788:41): user pid=8429 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189024910.792:42): user pid=8429 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189024910.792:43): user pid=8429 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189026061.218:44): user pid=8538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189026460.099:45): user pid=8628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189026460.099:46): user pid=8628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189026460.100:47): user pid=8628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189026460.105:48): user pid=8628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189026460.105:49): user pid=8628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189026472.482:50): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189026472.482:50): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf9d2bf8 a3=6 items=0 ppid=1 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189026480.778:51): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189026502.051:52): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189026502.051:52): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf9d2bf8 a3=6 items=0 ppid=1 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189028417.261:53): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=8767 comm="virt-viewer" sig=11
>type=USER_AUTH msg=audit(1189028428.970:54): user pid=9012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189028428.971:55): user pid=9012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189028428.998:56): user pid=9012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189028429.011:57): user pid=9012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189028429.011:58): user pid=9012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189028437.778:59): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189028952.062:60): user pid=9204 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189028952.062:61): user pid=9204 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189028957.864:62): user pid=9205 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189028957.865:63): user pid=9205 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189028957.866:64): user pid=9205 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189029208.359:65): user pid=9693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189029208.362:66): user pid=9693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189029208.362:67): user pid=9693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189029661.326:68): user pid=9834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189031542.543:69): user pid=10189 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189031542.543:70): user pid=10189 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189031542.544:71): user pid=10189 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189031542.552:72): user pid=10189 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189031542.552:73): user pid=10189 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1189032654.419:74): user pid=10312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189032654.419:75): user pid=10312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189032654.420:76): user pid=10312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189032654.424:77): user pid=10312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189032654.424:78): user pid=10312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189032951.356:79): user pid=2939 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189032951.356:80): user pid=2939 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189032957.109:81): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2577 comm="dhcdbd" sig=6
>type=AVC msg=audit(1189032969.479:82): avc:  denied  { read write } for  pid=10962 comm="modprobe" name="" dev=sockfs ino=549787 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189032969.479:82): avc:  denied  { read write } for  pid=10962 comm="modprobe" name="" dev=sockfs ino=549788 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189032969.479:82): arch=40000003 syscall=11 success=yes exit=0 a0=86d1e08 a1=bfecf408 a2=bfed1ce0 a3=86d1e08 items=0 ppid=10961 pid=10962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189032969.479:82):  path="socket:[549788]"
>type=AVC_PATH msg=audit(1189032969.479:82):  path="socket:[549787]"
>type=ANOM_ABEND msg=audit(1189032973.172:83): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1978 comm="named" sig=6
>type=DAEMON_END msg=audit(1189032976.272:6532): auditd normal halt, sending auid=4294967295 pid=11407 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1897
>type=DAEMON_START msg=audit(1189033194.092:2098): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1896 res=success, auditd pid=1896
>type=CONFIG_CHANGE msg=audit(1189033194.191:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189033194.191:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189033194.616:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189033194.616:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189033202.011:9): avc:  denied  { write } for  pid=2011 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189033202.011:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfaec900 a2=63a494 a3=0 items=0 ppid=1 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1189033202.287:10): avc:  denied  { read write } for  pid=2216 comm="modprobe" name="" dev=sockfs ino=9440 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189033202.287:10): avc:  denied  { read write } for  pid=2216 comm="modprobe" name="" dev=sockfs ino=9448 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189033202.287:10): arch=40000003 syscall=11 success=yes exit=0 a0=976a1d8 a1=bfddf0a8 a2=bfde24e0 a3=976a1d8 items=0 ppid=2175 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189033202.287:10):  path="socket:[9448]"
>type=AVC_PATH msg=audit(1189033202.287:10):  path="socket:[9440]"
>type=USER_ERR msg=audit(1189033217.431:11): user pid=2844 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189033226.602:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2714 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189033239.924:13): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189033239.928:14): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189033239.929:15): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189033239.933:16): login pid=2947 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189033239.983:17): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189033239.984:18): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189033262.445:19): user pid=3227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189033824.413:20): user pid=3547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)'
>type=USER_AUTH msg=audit(1189033826.036:21): user pid=3547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189033826.037:22): user pid=3547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189033826.037:23): user pid=3547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189033826.040:24): user pid=3547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189033826.040:25): user pid=3547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USYS_CONFIG msg=audit(1189033995.499:26): user pid=3695 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189058082.387:27): user pid=3805 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189058461.835:28): user pid=4005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189062061.457:29): user pid=5532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1189062600.499:30): user pid=5668 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189071380.652:31): user pid=5780 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189071545.298:32): user pid=5986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189071545.298:33): user pid=5986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189071545.299:34): user pid=5986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189071545.307:35): user pid=5986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189071545.308:36): user pid=5986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1189071569.307:37): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1977 comm="named" sig=6
>type=USER_LOGIN msg=audit(1189072661.367:38): user pid=6125 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=matej: exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.10, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1189072665.051:39): user pid=6125 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1189072665.052:40): user pid=6125 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1189072665.248:41): user pid=6125 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=LOGIN msg=audit(1189072665.249:42): login pid=6125 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189072665.249:43): user pid=6125 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1189072665.250:44): user pid=6127 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1189072665.302:45): user pid=6125 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=/dev/pts/2 res=success)'
>type=USER_ACCT msg=audit(1189072861.644:46): user pid=6168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1189073821.194:47): user pid=6125 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=USER_END msg=audit(1189073821.194:48): user pid=6125 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1189076461.109:49): user pid=6439 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189080061.508:50): user pid=6551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189083661.729:51): user pid=6663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1189084171.782:52): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189084171.782:53): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189084173.989:54): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2578 comm="dhcdbd" sig=6
>type=AVC msg=audit(1189084179.741:55): avc:  denied  { read write } for  pid=7172 comm="modprobe" name="" dev=sockfs ino=399016 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189084179.741:55): avc:  denied  { read write } for  pid=7172 comm="modprobe" name="" dev=sockfs ino=399017 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189084179.741:55): arch=40000003 syscall=11 success=yes exit=0 a0=83f6e08 a1=bfe6b398 a2=bfe6dc70 a3=83f6e08 items=0 ppid=7171 pid=7172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189084179.741:55):  path="socket:[399017]"
>type=AVC_PATH msg=audit(1189084179.741:55):  path="socket:[399016]"
>type=DAEMON_END msg=audit(1189084181.630:2099): auditd normal halt, sending auid=4294967295 pid=7612 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1896
>type=DAEMON_START msg=audit(1189090297.306:3830): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1897 res=success, auditd pid=1897
>type=CONFIG_CHANGE msg=audit(1189090297.406:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189090297.406:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189090297.681:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189090297.681:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189090304.530:9): avc:  denied  { read write } for  pid=2213 comm="modprobe" name="" dev=sockfs ino=9233 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189090304.530:9): avc:  denied  { read write } for  pid=2213 comm="modprobe" name="" dev=sockfs ino=9251 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189090304.530:9): arch=40000003 syscall=11 success=yes exit=0 a0=94661d8 a1=bff9d168 a2=bffa05a0 a3=94661d8 items=0 ppid=2174 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189090304.530:9):  path="socket:[9251]"
>type=AVC_PATH msg=audit(1189090304.530:9):  path="socket:[9233]"
>type=AVC msg=audit(1189090305.218:10): avc:  denied  { write } for  pid=2012 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189090305.218:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf834e40 a2=63a494 a3=0 items=0 ppid=1 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1189090319.784:11): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1189090338.784:12): user pid=2949 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189090338.787:13): user pid=2949 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189090338.788:14): user pid=2949 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189090338.792:15): login pid=2949 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189090338.812:16): user pid=2949 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189090338.814:17): user pid=2949 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189090340.597:18): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2705 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189090537.005:19): user pid=3490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189090537.005:20): user pid=3490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189090537.007:21): user pid=3490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189090537.012:22): user pid=3490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189090537.012:23): user pid=3490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189090550.100:24): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189090550.100:24): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfe20708 a3=6 items=0 ppid=1 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_ACCT msg=audit(1189090862.250:25): user pid=3569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1189090994.922:26): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=3553 comm="virt-viewer" sig=11
>type=ANOM_PROMISCUOUS msg=audit(1189091219.880:27): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USYS_CONFIG msg=audit(1189091263.499:28): user pid=3747 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1189092746.530:4136): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1921 res=success, auditd pid=1921
>type=CONFIG_CHANGE msg=audit(1189092746.630:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189092746.630:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189092746.691:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189092746.691:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189092753.396:9): avc:  denied  { read write } for  pid=2237 comm="modprobe" name="" dev=sockfs ino=9585 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189092753.396:9): avc:  denied  { read write } for  pid=2237 comm="modprobe" name="" dev=sockfs ino=9595 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189092753.396:9): arch=40000003 syscall=11 success=yes exit=0 a0=92b51d8 a1=bfbcf598 a2=bfbd29d0 a3=92b51d8 items=0 ppid=2198 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189092753.396:9):  path="socket:[9595]"
>type=AVC_PATH msg=audit(1189092753.396:9):  path="socket:[9585]"
>type=AVC msg=audit(1189092753.503:10): avc:  denied  { write } for  pid=2036 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189092753.503:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb29080 a2=63a494 a3=0 items=0 ppid=1 pid=2036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1189092766.670:11): user pid=2867 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189092774.345:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2749 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189092781.957:13): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189092781.960:14): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189092781.961:15): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189092781.965:16): login pid=2970 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189092781.975:17): user pid=2970 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189092781.975:18): user pid=2970 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189092836.311:19): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3300 comm="telepathy-idle" sig=6
>type=USER_AUTH msg=audit(1189092852.375:20): user pid=3505 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189092852.375:21): user pid=3505 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1189092856.500:22): user pid=3624 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1189097642.382:8047): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1927 res=success, auditd pid=1927
>type=CONFIG_CHANGE msg=audit(1189097642.481:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189097642.481:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189097642.711:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189097642.711:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189097649.722:9): avc:  denied  { read write } for  pid=2243 comm="modprobe" name="" dev=sockfs ino=9347 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189097649.722:9): avc:  denied  { read write } for  pid=2243 comm="modprobe" name="" dev=sockfs ino=9361 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189097649.722:9): arch=40000003 syscall=11 success=yes exit=0 a0=8dd71d8 a1=bfa76c38 a2=bfa7a070 a3=8dd71d8 items=0 ppid=2204 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189097649.722:9):  path="socket:[9361]"
>type=AVC_PATH msg=audit(1189097649.722:9):  path="socket:[9347]"
>type=AVC msg=audit(1189097650.056:10): avc:  denied  { write } for  pid=2042 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189097650.056:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf91c730 a2=63a494 a3=0 items=0 ppid=1 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1189097664.710:11): user pid=2873 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189097664.975:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2756 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189097681.158:13): user pid=2969 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189097681.161:14): user pid=2969 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189097681.162:15): user pid=2969 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189097681.167:16): login pid=2969 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189097681.186:17): user pid=2969 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189097681.188:18): user pid=2969 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1189097962.203:19): user pid=3578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189097962.203:20): user pid=3578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189097962.204:21): user pid=3578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189097962.213:22): user pid=3578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189097962.213:23): user pid=3578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189098061.852:24): user pid=3623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1189098645.499:25): user pid=4110 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189099348.297:26): user pid=4443 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1189099600.291:3883): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1924 res=success, auditd pid=1924
>type=CONFIG_CHANGE msg=audit(1189099600.391:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189099600.391:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189099600.750:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189099600.750:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189099607.937:9): avc:  denied  { read write } for  pid=2240 comm="modprobe" name="" dev=sockfs ino=9393 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189099607.937:9): avc:  denied  { read write } for  pid=2240 comm="modprobe" name="" dev=sockfs ino=9407 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189099607.937:9): arch=40000003 syscall=11 success=yes exit=0 a0=93b71d8 a1=bfa45c08 a2=bfa49040 a3=93b71d8 items=0 ppid=2202 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189099607.937:9):  path="socket:[9407]"
>type=AVC_PATH msg=audit(1189099607.937:9):  path="socket:[9393]"
>type=AVC msg=audit(1189099608.096:10): avc:  denied  { write } for  pid=2039 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189099608.096:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfc1c230 a2=63a494 a3=0 items=0 ppid=1 pid=2039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189099622.325:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2753 comm="hald-addon-acpi" sig=11
>type=USER_ERR msg=audit(1189099622.434:12): user pid=2870 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1189099667.724:13): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189099667.726:14): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189099667.726:15): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189099667.728:16): login pid=2965 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189099667.736:17): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189099667.737:18): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189101661.897:19): user pid=3574 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189105261.016:20): user pid=3762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189108519.347:21): user pid=4132 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189108519.347:22): user pid=4132 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189108519.348:23): user pid=4132 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189108519.350:24): user pid=4132 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189108519.350:25): user pid=4132 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189108528.021:26): user pid=4133 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189108528.022:27): user pid=4133 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189108528.022:28): user pid=4133 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189108660.692:29): user pid=4149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189108660.693:30): user pid=4149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189108660.773:31): user pid=4149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189108861.067:32): user pid=4162 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1189109074.729:33): user pid=4149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189109080.594:34): user pid=4198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189109080.595:35): user pid=4198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189109080.595:36): user pid=4198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189109080.605:37): user pid=4198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189109080.606:38): user pid=4198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189109095.601:39): user pid=4232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189109095.601:40): user pid=4232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189109095.618:41): user pid=4232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189109101.729:42): user pid=4232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189110969.700:43): user pid=4677 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189110969.700:44): user pid=4677 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189110969.712:45): user pid=4677 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1189111041.066:46): user pid=4677 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189111054.787:47): user pid=4717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189111054.787:48): user pid=4717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189111054.788:49): user pid=4717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189111054.792:50): user pid=4717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189111054.792:51): user pid=4717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189112461.110:52): user pid=4892 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1189115257.821:53): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189115257.822:54): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189115260.082:55): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2604 comm="dhcdbd" sig=6
>type=AVC msg=audit(1189115269.478:56): avc:  denied  { read write } for  pid=5679 comm="modprobe" name="" dev=sockfs ino=425241 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189115269.478:56): avc:  denied  { read write } for  pid=5679 comm="modprobe" name="" dev=sockfs ino=425242 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189115269.478:56): arch=40000003 syscall=11 success=yes exit=0 a0=817ae08 a1=bfc5e998 a2=bfc61270 a3=817ae08 items=0 ppid=5678 pid=5679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189115269.478:56):  path="socket:[425242]"
>type=AVC_PATH msg=audit(1189115269.478:56):  path="socket:[425241]"
>type=ANOM_ABEND msg=audit(1189115270.701:57): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2005 comm="named" sig=6
>type=DAEMON_END msg=audit(1189115271.067:3884): auditd normal halt, sending auid=4294967295 pid=6119 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1924
>type=DAEMON_START msg=audit(1189143496.724:5576): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1941 res=success, auditd pid=1941
>type=CONFIG_CHANGE msg=audit(1189143496.824:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189143496.824:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189143496.972:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189143496.972:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189143504.150:9): avc:  denied  { read write } for  pid=2257 comm="modprobe" name="" dev=sockfs ino=9298 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189143504.150:9): avc:  denied  { read write } for  pid=2257 comm="modprobe" name="" dev=sockfs ino=9312 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189143504.150:9): arch=40000003 syscall=11 success=yes exit=0 a0=8d681d8 a1=bfce1ea8 a2=bfce52e0 a3=8d681d8 items=0 ppid=2218 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189143504.150:9):  path="socket:[9312]"
>type=AVC_PATH msg=audit(1189143504.150:9):  path="socket:[9298]"
>type=AVC msg=audit(1189143504.322:10): avc:  denied  { write } for  pid=2056 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189143504.322:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf880690 a2=63a494 a3=0 items=0 ppid=1 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1189143518.875:11): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189143531.128:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2770 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189143541.968:13): user pid=2993 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189143542.972:14): user pid=2993 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189143542.973:15): user pid=2993 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189143542.977:16): login pid=2993 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189143542.986:17): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189143542.986:18): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189143702.013:19): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3452 comm="telepathy-idle" sig=6
>type=USER_ACCT msg=audit(1189144862.063:20): user pid=3692 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1189148426.499:21): user pid=4956 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189188818.318:22): user pid=5333 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189188949.132:23): user pid=5521 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189188949.132:24): user pid=5521 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189188949.171:25): user pid=5521 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189188949.190:26): user pid=5521 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189188949.190:27): user pid=5521 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_ABEND msg=audit(1189188999.505:28): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2022 comm="named" sig=6
>type=USER_AUTH msg=audit(1189191180.880:29): user pid=5987 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189191180.881:30): user pid=5987 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189191181.046:31): user pid=5987 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189191252.728:32): user pid=6023 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189191252.729:33): user pid=6023 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189191252.730:34): user pid=6023 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189191252.734:35): user pid=6023 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189191252.734:36): user pid=6023 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189191465.624:37): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189191465.624:37): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189191470.495:38): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189191495.864:39): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189191495.864:39): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189191499.642:40): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=6152 comm="qemu-kvm" sig=6
>type=ANOM_PROMISCUOUS msg=audit(1189191499.713:41): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_ACCT msg=audit(1189191661.461:42): user pid=6201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189191764.376:43): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189191764.376:43): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaeda8 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189191794.443:44): dev=vnet1 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189191794.443:44): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaeda8 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189191854.729:45): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189191855.189:46): dev=vnet1 prom=0 old_prom=256 auid=4294967295
>type=USER_END msg=audit(1189192049.906:47): user pid=5987 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189192071.577:48): user pid=6430 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189192071.578:49): user pid=6430 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189192071.625:50): user pid=6430 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189192071.632:51): user pid=6430 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189192071.633:52): user pid=6430 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189193819.433:53): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189193819.433:53): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189193823.433:54): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189193846.020:55): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189193846.020:55): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189193848.867:56): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=6638 comm="qemu-kvm" sig=6
>type=ANOM_PROMISCUOUS msg=audit(1189193848.916:57): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189193954.339:58): user pid=6688 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189193954.339:59): user pid=6688 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189193954.428:60): user pid=6688 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189193983.275:61): user pid=6688 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189193993.306:62): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189193993.306:62): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189193994.267:63): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=6701 comm="qemu-kvm" sig=6
>type=ANOM_PROMISCUOUS msg=audit(1189193994.300:64): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_ACCT msg=audit(1189195261.559:65): user pid=6780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189197478.105:66): user pid=6855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189197478.105:67): user pid=6855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189197478.117:68): user pid=6855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189197487.743:69): user pid=6855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189197492.244:70): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189197492.244:70): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189197493.183:71): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=6864 comm="qemu-kvm" sig=6
>type=ANOM_PROMISCUOUS msg=audit(1189197493.235:72): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189197507.937:73): user pid=6904 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189197507.937:74): user pid=6904 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189197507.941:75): user pid=6904 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189197517.434:76): user pid=6904 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189198190.713:77): user pid=7094 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189198190.714:78): user pid=7094 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189198190.715:79): user pid=7094 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189198190.721:80): user pid=7094 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189198190.721:81): user pid=7094 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189198234.030:82): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189198234.030:82): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_ACCT msg=audit(1189198861.695:83): user pid=7252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189202109.860:84): user pid=7406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189202109.860:85): user pid=7406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189202109.911:86): user pid=7406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189202109.960:87): user pid=7406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189202109.960:88): user pid=7406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1189202338.650:89): user pid=7454 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=CRED_ACQ msg=audit(1189202351.255:90): user pid=7456 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189202351.256:91): user pid=7456 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189202351.256:92): user pid=7456 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189202461.510:93): user pid=7498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189203173.116:94): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189203175.601:95): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189203175.601:95): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaeda8 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189205627.755:96): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=7643 comm="virt-viewer" sig=11
>type=ANOM_PROMISCUOUS msg=audit(1189205643.325:97): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189205746.953:98): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189205746.953:98): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189205747.308:99): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189205793.746:100): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189205793.746:100): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189205832.348:101): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189206057.837:102): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189206057.837:102): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189206059.272:103): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=7957 comm="qemu-kvm" sig=6
>type=ANOM_PROMISCUOUS msg=audit(1189206059.311:104): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_ACCT msg=audit(1189206062.433:105): user pid=7994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189206103.597:106): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189206103.597:106): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1189206126.700:107): user pid=8030 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189206126.701:108): user pid=8030 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189206238.962:109): dev=vnet1 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189206238.962:109): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189206345.771:110): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189207320.970:111): dev=vnet1 prom=0 old_prom=256 auid=4294967295
>type=USER_ACCT msg=audit(1189209662.186:112): user pid=8274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189209769.250:113): user pid=8282 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1189209778.261:114): user pid=8285 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_END msg=audit(1189210477.005:115): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189210477.018:116): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1189210498.564:117): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189210498.567:118): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189210498.568:119): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189210498.597:120): login pid=2993 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1189210498.621:121): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189210498.623:122): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USYS_CONFIG msg=audit(1189210553.500:123): user pid=8876 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189231445.210:124): user pid=9188 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189231527.573:125): user pid=9365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189231527.574:126): user pid=9365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189231527.588:127): user pid=9365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189231527.595:128): user pid=9365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189231527.595:129): user pid=9365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189231587.266:130): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189231587.266:131): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189231592.214:132): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2621 comm="dhcdbd" sig=6
>type=AVC msg=audit(1189231600.383:133): avc:  denied  { read write } for  pid=9893 comm="modprobe" name="" dev=sockfs ino=699867 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189231600.383:133): avc:  denied  { read write } for  pid=9893 comm="modprobe" name="" dev=sockfs ino=699868 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189231600.383:133): arch=40000003 syscall=11 success=yes exit=0 a0=9434e08 a1=bf88e5c8 a2=bf890ea0 a3=9434e08 items=0 ppid=9892 pid=9893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189231600.383:133):  path="socket:[699868]"
>type=AVC_PATH msg=audit(1189231600.383:133):  path="socket:[699867]"
>type=DAEMON_END msg=audit(1189231605.051:5577): auditd normal halt, sending auid=4294967295 pid=10333 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1941
>type=DAEMON_START msg=audit(1189231962.605:6078): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1978 res=success, auditd pid=1978
>type=CONFIG_CHANGE msg=audit(1189231962.705:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189231962.705:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189231962.931:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189231962.931:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189231970.252:9): avc:  denied  { write } for  pid=2093 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189231970.252:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf95ff70 a2=63a494 a3=0 items=0 ppid=1 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1189231970.525:10): avc:  denied  { read write } for  pid=2296 comm="modprobe" name="" dev=sockfs ino=9550 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189231970.525:10): avc:  denied  { read write } for  pid=2296 comm="modprobe" name="" dev=sockfs ino=9558 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189231970.525:10): arch=40000003 syscall=11 success=yes exit=0 a0=99951d8 a1=bfcc1688 a2=bfcc4ac0 a3=99951d8 items=0 ppid=2255 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189231970.525:10):  path="socket:[9558]"
>type=AVC_PATH msg=audit(1189231970.525:10):  path="socket:[9550]"
>type=USER_ERR msg=audit(1189231985.527:11): user pid=2924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189232001.544:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2807 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189232027.719:13): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1189232027.720:14): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1189232146.486:15): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189232146.490:16): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189232146.490:17): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189232146.494:18): login pid=3018 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189232146.502:19): user pid=3018 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189232146.502:20): user pid=3018 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1189232182.587:21): user pid=3392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189232182.588:22): user pid=3392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189232182.589:23): user pid=3392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189232182.623:24): user pid=3392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189232182.624:25): user pid=3392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189234861.762:26): user pid=3584 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189235331.014:27): user pid=3605 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189235331.014:28): user pid=3605 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189235331.015:29): user pid=3605 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189235331.021:30): user pid=3605 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189235331.021:31): user pid=3605 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189235643.746:32): user pid=3688 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189235643.746:33): user pid=3688 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189235643.807:34): user pid=3688 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189235769.954:35): user pid=3757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189235769.955:36): user pid=3757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189235769.955:37): user pid=3757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189235769.961:38): user pid=3757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189235769.961:39): user pid=3757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1189235824.904:40): user pid=3798 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189235824.904:41): user pid=3798 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189235824.905:42): user pid=3798 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189235824.911:43): user pid=3798 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189235824.911:44): user pid=3798 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189235872.191:45): user pid=3862 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189235872.191:46): user pid=3862 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189235872.196:47): user pid=3862 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=MAC_POLICY_LOAD msg=audit(1189236355.788:48): policy loaded auid=500
>type=SYSCALL msg=audit(1189236355.788:48): arch=40000003 syscall=4 success=yes exit=1586511 a0=4 a1=b7de9000 a2=18354f a3=bfa11778 items=0 ppid=4551 pid=4552 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1189236355.844:49): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=ANOM_ABEND msg=audit(1189236386.236:50): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2059 comm="named" sig=6
>type=USER_END msg=audit(1189236701.475:51): user pid=3862 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189236733.500:52): user pid=4886 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189244752.524:53): user pid=5010 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189245661.211:54): user pid=5406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189249261.279:55): user pid=5690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189251649.749:56): user pid=6203 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189251649.749:57): user pid=6203 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189251649.859:58): user pid=6203 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189251744.703:59): user pid=6243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189251744.704:60): user pid=6243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189251744.704:61): user pid=6243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189251744.750:62): user pid=6243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189251744.750:63): user pid=6243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189251761.917:64): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189251761.917:64): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf88c178 a3=6 items=0 ppid=1 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189251776.321:65): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189251838.551:66): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189251838.551:66): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf88c178 a3=6 items=0 ppid=1 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_END msg=audit(1189252607.646:67): user pid=6203 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189252862.352:68): user pid=11239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189253437.872:69): user pid=11550 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189253437.872:70): user pid=11550 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1189253437.935:71): user pid=11550 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189253437.937:72): user pid=11550 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189253437.937:73): user pid=11550 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1189254499.613:74): user pid=11670 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189254499.613:75): user pid=11670 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1189254499.613:76): user pid=11670 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189254499.618:77): user pid=11670 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189254499.618:78): user pid=11670 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=ANOM_ABEND msg=audit(1189254511.959:79): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=11703 comm="virt-viewer" sig=11
>type=ANOM_PROMISCUOUS msg=audit(1189254518.035:80): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189254749.956:81): user pid=11868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189254749.957:82): user pid=11868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189254749.958:83): user pid=11868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189254749.961:84): user pid=11868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189254749.961:85): user pid=11868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189254902.974:86): user pid=12005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189254902.975:87): user pid=12005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189254902.975:88): user pid=12005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189254902.985:89): user pid=12005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189254902.985:90): user pid=12005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189256461.822:91): user pid=12232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189257713.048:92): user pid=12396 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189257713.049:93): user pid=12396 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189257713.050:94): user pid=12396 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189257713.056:95): user pid=12396 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189257713.057:96): user pid=12396 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189257929.814:97): user pid=12480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189257929.814:98): user pid=12480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189257929.841:99): user pid=12480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1189257941.071:100): user pid=12480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189258525.499:101): user pid=12640 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189275478.000:102): user pid=12762 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189275551.936:103): user pid=12943 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:20 res=failed)'
>type=USER_LOGIN msg=audit(1189275551.937:104): user pid=12943 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:20 res=failed)'
>type=USER_AUTH msg=audit(1189275577.161:105): user pid=12943 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:20 res=failed)'
>type=USER_LOGIN msg=audit(1189275577.161:106): user pid=12943 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:20 res=failed)'
>type=USER_AUTH msg=audit(1189275686.750:107): user pid=12943 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:20 res=success)'
>type=USYS_CONFIG msg=audit(1189276326.528:108): user pid=13194 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189278318.005:109): user pid=13327 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189278400.622:110): user pid=13482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189278400.622:111): user pid=13482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189278400.623:112): user pid=13482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189278400.681:113): user pid=13482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189278400.681:114): user pid=13482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189279203.457:115): user pid=14195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189279203.457:116): user pid=14195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189279203.458:117): user pid=14195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189279203.459:118): user pid=14195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189279203.459:119): user pid=14195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189279256.463:120): user pid=14201 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189279256.463:121): user pid=14201 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189279256.463:122): user pid=14201 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189281662.017:123): user pid=14520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1189281736.499:124): user pid=14810 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189318165.995:125): user pid=15196 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189318208.222:126): user pid=15357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189318208.222:127): user pid=15357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189318208.223:128): user pid=15357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189318208.274:129): user pid=15357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189318208.274:130): user pid=15357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189318251.998:131): user pid=15793 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189318252.001:132): user pid=15793 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189318252.001:133): user pid=15793 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189319689.984:134): user pid=15937 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1189319704.436:135): user pid=15937 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189319704.437:136): user pid=15937 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189319704.553:137): user pid=15937 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1189319719.018:138): user pid=15937 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189321261.614:139): user pid=16210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189324861.654:140): user pid=16445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1189327035.500:141): user pid=16822 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189329396.124:142): user pid=17165 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189332061.225:143): user pid=17458 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189335661.294:144): user pid=17680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189336991.930:145): user pid=17802 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189336991.930:146): user pid=17802 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189336991.932:147): user pid=17802 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189336991.938:148): user pid=17802 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189336991.938:149): user pid=17802 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189339261.562:150): user pid=18416 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189342861.607:151): user pid=18690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189345017.955:152): user pid=18959 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189345017.955:153): user pid=18959 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189345017.990:154): user pid=18959 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1189345478.548:155): user pid=18959 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189346461.645:156): user pid=19441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189346621.342:157): user pid=19494 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1189346632.535:158): user pid=19496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189346632.535:159): user pid=19496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189346632.536:160): user pid=19496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189346632.539:161): user pid=19496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189346632.539:162): user pid=19496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189347758.302:163): user pid=19757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189347758.302:164): user pid=19757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189347758.303:165): user pid=19757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189347758.311:166): user pid=19757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189347758.311:167): user pid=19757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189348664.180:168): user pid=20146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189348664.180:169): user pid=20146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189348664.180:170): user pid=20146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189348664.180:171): user pid=20146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189348664.180:172): user pid=20146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189348685.342:173): user pid=20177 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189348685.342:174): user pid=20177 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189348685.342:175): user pid=20177 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189349455.675:176): user pid=21011 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189349455.675:177): user pid=21011 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189349455.744:178): user pid=21011 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189349455.770:179): user pid=21011 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189349455.771:180): user pid=21011 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189349486.837:181): user pid=21012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189349486.838:182): user pid=21012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189349486.838:183): user pid=21012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189350061.823:184): user pid=21118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189350216.220:185): user pid=21128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1189350218.497:186): user pid=21128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189350218.497:187): user pid=21128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189350218.498:188): user pid=21128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189350218.499:189): user pid=21128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189350218.499:190): user pid=21128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189350240.924:191): user pid=21131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189350240.936:192): user pid=21131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189350240.936:193): user pid=21131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1189351204.457:194): user pid=21329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1189351207.942:195): user pid=21329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189351207.943:196): user pid=21329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189351207.943:197): user pid=21329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189351207.949:198): user pid=21329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189351207.949:199): user pid=21329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189351371.959:200): user pid=21450 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189351371.963:201): user pid=21450 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189351371.963:202): user pid=21450 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189353662.051:203): user pid=21710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189357261.103:204): user pid=21943 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189358533.364:205): user pid=22056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189358533.364:206): user pid=22056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189358533.365:207): user pid=22056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189358533.367:208): user pid=22056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189358533.367:209): user pid=22056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1189358533.750:210): avc:  denied  { read write } for  pid=22073 comm="modprobe" name="" dev=sockfs ino=1555449 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189358533.750:210): avc:  denied  { read write } for  pid=22073 comm="modprobe" name="" dev=sockfs ino=1555450 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189358533.750:210): arch=40000003 syscall=11 success=yes exit=0 a0=9b15bc8 a1=bf827df8 a2=bf82a6d0 a3=9b15bc8 items=0 ppid=22072 pid=22073 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189358533.750:210):  path="socket:[1555450]"
>type=AVC_PATH msg=audit(1189358533.750:210):  path="socket:[1555449]"
>type=USER_ACCT msg=audit(1189360861.135:211): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189363509.290:212): user pid=23155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189363509.291:213): user pid=23155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189363509.292:214): user pid=23155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189363509.294:215): user pid=23155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189363509.294:216): user pid=23155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189364461.165:217): user pid=23593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189365504.032:218): user pid=23845 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189365504.032:219): user pid=23845 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189365504.034:220): user pid=23845 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189365504.034:221): user pid=23845 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189365504.034:222): user pid=23845 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1189365760.873:223): user pid=23899 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189365760.873:224): user pid=23899 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189365760.874:225): user pid=23899 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189365760.875:226): user pid=23899 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189365760.875:227): user pid=23899 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189366228.309:228): user pid=30488 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189366228.309:229): user pid=30488 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189366228.310:230): user pid=30488 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189366228.311:231): user pid=30488 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189366228.311:232): user pid=30488 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189366334.227:233): user pid=13178 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189366334.228:234): user pid=13178 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189366334.228:235): user pid=13178 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189366351.743:236): user pid=13179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189366351.743:237): user pid=13179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189366351.743:238): user pid=13179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189366360.940:239): user pid=13182 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189366360.940:240): user pid=13182 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189366360.940:241): user pid=13182 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189366501.601:242): user pid=30348 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189366501.601:243): user pid=30348 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189366501.601:244): user pid=30348 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189366510.167:245): user pid=30349 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189366510.168:246): user pid=30349 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189366510.168:247): user pid=30349 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189366539.477:248): user pid=30361 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189366539.480:249): user pid=30361 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189366539.480:250): user pid=30361 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189366682.531:251): user pid=30417 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189366682.537:252): user pid=30417 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189366682.537:253): user pid=30417 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189366718.766:254): user pid=30453 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189366718.766:255): user pid=30453 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189366718.766:256): user pid=30453 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189366924.425:257): user pid=30600 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189366924.425:258): user pid=30600 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189366924.427:259): user pid=30600 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189366924.427:260): user pid=30600 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189366924.427:261): user pid=30600 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189366935.176:262): user pid=30603 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189366935.184:263): user pid=30603 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189366935.184:264): user pid=30603 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_LOGIN msg=audit(1189367737.212:265): user pid=30837 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=marketa: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1189367751.261:266): user pid=30841 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=matej: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1189367751.266:267): user pid=30841 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1189367751.267:268): user pid=30841 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1189367751.543:269): user pid=30841 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=LOGIN msg=audit(1189367751.547:270): login pid=30841 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189367751.547:271): user pid=30841 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1189367751.550:272): user pid=30843 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1189368061.250:273): user pid=30904 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1189368485.865:274): user pid=30841 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_END msg=audit(1189368485.869:275): user pid=30841 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_AUTH msg=audit(1189369297.855:276): user pid=31065 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189369297.855:277): user pid=31065 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189369297.914:278): user pid=31065 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_LOGIN msg=audit(1189369916.547:279): user pid=31119 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=marketa: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1189369925.816:280): user pid=31121 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=matej: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1189369925.822:281): user pid=31121 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1189369925.823:282): user pid=31121 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1189369926.067:283): user pid=31121 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=LOGIN msg=audit(1189369926.078:284): login pid=31121 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189369926.079:285): user pid=31121 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1189369926.082:286): user pid=31123 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1189371117.738:287): user pid=31121 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_END msg=audit(1189371117.740:288): user pid=31121 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1189371661.603:289): user pid=31379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189372070.507:290): user pid=31482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1189372072.750:291): user pid=31482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189372072.750:292): user pid=31482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189372072.751:293): user pid=31482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189372072.795:294): user pid=31482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189372072.795:295): user pid=31482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189372865.883:296): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_AUTH msg=audit(1189372870.106:297): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_AUTH msg=audit(1189372874.514:298): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189372874.514:299): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189372874.515:300): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189372874.520:301): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189372874.520:302): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_LOGIN msg=audit(1189373669.385:303): user pid=31751 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1189373671.729:304): user pid=31751 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1189373671.730:305): user pid=31751 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1189373671.921:306): user pid=31751 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=LOGIN msg=audit(1189373671.924:307): login pid=31751 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1189373671.925:308): user pid=31751 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1189373671.930:309): user pid=31753 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1189373672.053:310): user pid=31751 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_END msg=audit(1189373672.054:311): user pid=31751 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_END msg=audit(1189373710.115:312): user pid=31065 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189373768.440:313): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_AUTH msg=audit(1189373772.352:314): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_AUTH msg=audit(1189373773.829:315): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189373773.830:316): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189373773.830:317): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189373773.836:318): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189373773.836:319): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1189373846.015:320): avc:  denied  { read write } for  pid=31940 comm="modprobe" name="" dev=sockfs ino=2011554 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189373846.015:320): avc:  denied  { read write } for  pid=31940 comm="modprobe" name="" dev=sockfs ino=2011555 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189373846.015:320): arch=40000003 syscall=11 success=yes exit=0 a0=84a3530 a1=bfb9a968 a2=bfb9d240 a3=84a3530 items=0 ppid=31939 pid=31940 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189373846.015:320):  path="socket:[2011555]"
>type=AVC_PATH msg=audit(1189373846.015:320):  path="socket:[2011554]"
>type=AVC msg=audit(1189373846.096:321): avc:  denied  { write } for  pid=31946 comm="modprobe" name="iptables.l31943" dev=dm-0 ino=6044359 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:object_r:initrc_tmp_t:s0 tclass=file
>type=AVC msg=audit(1189373846.096:321): avc:  denied  { read } for  pid=31946 comm="modprobe" name="ip_tables_names" dev=proc ino=-268435041 scontext=user_u:system_r:insmod_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
>type=AVC msg=audit(1189373846.096:321): avc:  denied  { read write } for  pid=31946 comm="modprobe" name="" dev=sockfs ino=2011575 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189373846.096:321): avc:  denied  { read write } for  pid=31946 comm="modprobe" name="" dev=sockfs ino=2011576 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189373846.096:321): arch=40000003 syscall=11 success=yes exit=0 a0=88a56f8 a1=bfc3ebb8 a2=bfc3f2fc a3=88a56f8 items=0 ppid=31945 pid=31946 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189373846.096:321):  path="socket:[2011576]"
>type=AVC_PATH msg=audit(1189373846.096:321):  path="socket:[2011575]"
>type=AVC_PATH msg=audit(1189373846.096:321):  path="/proc/net/ip_tables_names"
>type=AVC_PATH msg=audit(1189373846.096:321):  path="/tmp/iptables.l31943"
>type=USER_LOGIN msg=audit(1189374042.335:322): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1189374046.449:323): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=failed)'
>type=USER_LOGIN msg=audit(1189374046.500:324): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1189374048.696:325): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1189374048.697:326): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1189374048.892:327): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=LOGIN msg=audit(1189374048.893:328): login pid=31978 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1189374048.894:329): user pid=31978 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1189374048.898:330): user pid=31980 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1189374048.967:331): user pid=31978 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_END msg=audit(1189374048.969:332): user pid=31978 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1189374059.243:333): user pid=31999 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1189374061.938:334): user pid=31999 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1189374061.939:335): user pid=31999 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1189374062.133:336): user pid=31999 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=LOGIN msg=audit(1189374062.134:337): login pid=31999 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1189374062.134:338): user pid=31999 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1189374062.139:339): user pid=32001 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1189374062.204:340): user pid=31999 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_END msg=audit(1189374062.205:341): user pid=31999 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=AVC msg=audit(1189374090.346:342): avc:  denied  { read write } for  pid=32039 comm="modprobe" name="" dev=sockfs ino=2018397 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189374090.346:342): avc:  denied  { read write } for  pid=32039 comm="modprobe" name="" dev=sockfs ino=2018398 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189374090.346:342): arch=40000003 syscall=11 success=yes exit=0 a0=8aa0530 a1=bfd19ae8 a2=bfd1c3c0 a3=8aa0530 items=0 ppid=32038 pid=32039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189374090.346:342):  path="socket:[2018398]"
>type=AVC_PATH msg=audit(1189374090.346:342):  path="socket:[2018397]"
>type=AVC msg=audit(1189374091.273:343): avc:  denied  { read write } for  pid=32313 comm="modprobe" name="" dev=sockfs ino=2018714 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189374091.273:343): avc:  denied  { read write } for  pid=32313 comm="modprobe" name="" dev=sockfs ino=2018715 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189374091.273:343): arch=40000003 syscall=11 success=yes exit=0 a0=8458530 a1=bfbc6188 a2=bfbc8a60 a3=8458530 items=0 ppid=32312 pid=32313 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189374091.273:343):  path="socket:[2018715]"
>type=AVC_PATH msg=audit(1189374091.273:343):  path="socket:[2018714]"
>type=AVC msg=audit(1189374091.285:344): avc:  denied  { write } for  pid=32319 comm="modprobe" name="iptables.f32316" dev=dm-0 ino=6044359 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:object_r:initrc_tmp_t:s0 tclass=file
>type=AVC msg=audit(1189374091.285:344): avc:  denied  { read } for  pid=32319 comm="modprobe" name="ip_tables_names" dev=proc ino=-268435041 scontext=user_u:system_r:insmod_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
>type=AVC msg=audit(1189374091.285:344): avc:  denied  { read write } for  pid=32319 comm="modprobe" name="" dev=sockfs ino=2018723 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189374091.285:344): avc:  denied  { read write } for  pid=32319 comm="modprobe" name="" dev=sockfs ino=2018724 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189374091.285:344): arch=40000003 syscall=11 success=yes exit=0 a0=93426f8 a1=bf892808 a2=bf892f4c a3=93426f8 items=0 ppid=32318 pid=32319 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189374091.285:344):  path="socket:[2018724]"
>type=AVC_PATH msg=audit(1189374091.285:344):  path="socket:[2018723]"
>type=AVC_PATH msg=audit(1189374091.285:344):  path="/proc/net/ip_tables_names"
>type=AVC_PATH msg=audit(1189374091.285:344):  path="/tmp/iptables.f32316"
>type=USER_AUTH msg=audit(1189374181.144:345): user pid=32340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1189374183.322:346): user pid=32341 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189374183.322:347): user pid=32341 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189374183.396:348): user pid=32341 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189374183.396:349): user pid=32341 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1189374231.489:350): user pid=32341 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189374231.490:351): user pid=32341 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1189374254.126:352): user pid=32389 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1189374255.486:353): user pid=32389 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189374255.486:354): user pid=32389 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189374255.487:355): user pid=32389 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189374255.488:356): user pid=32389 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189374255.489:357): user pid=32389 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189374262.128:358): user pid=32390 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189374262.128:359): user pid=32390 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189374262.129:360): user pid=32390 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=ANOM_ABEND msg=audit(1189374758.172:361): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=32544 comm="totem-video-thu" sig=11
>type=USER_END msg=audit(1189374770.094:362): user pid=3018 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189374770.094:363): user pid=3018 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189374773.557:364): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2658 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1189374791.286:6079): auditd normal halt, sending auid=4294967295 pid=894 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1978
>type=DAEMON_START msg=audit(1189401575.144:4100): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1904 res=success, auditd pid=1904
>type=CONFIG_CHANGE msg=audit(1189401575.250:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189401575.250:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189401575.441:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189401575.442:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189401582.811:9): avc:  denied  { write } for  pid=2019 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189401582.811:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb7af40 a2=63a494 a3=0 items=0 ppid=1 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1189401583.101:10): avc:  denied  { read write } for  pid=2222 comm="modprobe" name="" dev=sockfs ino=9444 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189401583.101:10): avc:  denied  { read write } for  pid=2222 comm="modprobe" name="" dev=sockfs ino=9452 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189401583.101:10): arch=40000003 syscall=11 success=yes exit=0 a0=88f1710 a1=bfc37558 a2=bfc3a990 a3=88f1710 items=0 ppid=2181 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189401583.101:10):  path="socket:[9452]"
>type=AVC_PATH msg=audit(1189401583.101:10):  path="socket:[9444]"
>type=ANOM_ABEND msg=audit(1189401596.610:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2710 comm="hald-addon-acpi" sig=11
>type=USER_ERR msg=audit(1189401598.615:12): user pid=2850 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1189401614.975:13): user pid=2960 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189401614.977:14): user pid=2960 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189401614.978:15): user pid=2960 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189401614.980:16): login pid=2960 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189401614.988:17): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189401614.989:18): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189404061.417:19): user pid=3665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1189405395.499:20): user pid=4096 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189407916.430:21): user pid=4468 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189408056.523:22): user pid=4775 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189408056.523:23): user pid=4775 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189408056.647:24): user pid=4775 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189408056.733:25): user pid=4775 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189408056.733:26): user pid=4775 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189408121.099:27): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189408121.099:28): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189408126.664:29): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2584 comm="dhcdbd" sig=6
>type=AVC msg=audit(1189408141.782:30): avc:  denied  { read write } for  pid=7773 comm="modprobe" name="" dev=sockfs ino=124366 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189408141.782:30): avc:  denied  { read write } for  pid=7773 comm="modprobe" name="" dev=sockfs ino=124367 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189408141.782:30): arch=40000003 syscall=11 success=yes exit=0 a0=852e530 a1=bf9cef08 a2=bf9d17e0 a3=852e530 items=0 ppid=7772 pid=7773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189408141.782:30):  path="socket:[124367]"
>type=AVC_PATH msg=audit(1189408141.782:30):  path="socket:[124366]"
>type=ANOM_ABEND msg=audit(1189408144.307:31): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1985 comm="named" sig=6
>type=DAEMON_END msg=audit(1189408147.994:4101): auditd normal halt, sending auid=4294967295 pid=8404 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1904
>type=DAEMON_START msg=audit(1189408243.281:1577): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1900 res=success, auditd pid=1900
>type=CONFIG_CHANGE msg=audit(1189408243.381:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189408243.381:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189408243.425:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189408243.425:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189408250.897:9): avc:  denied  { write } for  pid=2015 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189408250.897:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bff4b550 a2=63a494 a3=0 items=0 ppid=1 pid=2015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1189408251.044:10): avc:  denied  { read write } for  pid=2219 comm="modprobe" name="" dev=sockfs ino=9487 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189408251.044:10): avc:  denied  { read write } for  pid=2219 comm="modprobe" name="" dev=sockfs ino=9497 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189408251.044:10): arch=40000003 syscall=11 success=yes exit=0 a0=8154710 a1=bfaaf478 a2=bfab28b0 a3=8154710 items=0 ppid=2177 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189408251.044:10):  path="socket:[9497]"
>type=AVC_PATH msg=audit(1189408251.044:10):  path="socket:[9487]"
>type=USER_ERR msg=audit(1189408265.700:11): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189408265.755:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2734 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189408418.611:13): user pid=2949 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189408418.615:14): user pid=2949 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189408418.616:15): user pid=2949 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189408418.618:16): login pid=2949 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189408418.626:17): user pid=2949 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189408418.627:18): user pid=2949 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1189410482.513:19): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189410482.513:20): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189410482.588:21): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1189410754.412:22): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189411261.847:23): user pid=3876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189411801.885:24): user pid=3946 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189411801.885:25): user pid=3946 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189411801.887:26): user pid=3946 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189411801.892:27): user pid=3946 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189411801.892:28): user pid=3946 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1189411877.189:29): user pid=3988 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189411877.189:30): user pid=3988 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189411877.196:31): user pid=3988 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1189412257.885:32): user pid=4816 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1189412258.418:33): user pid=4820 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1189412258.684:34): user pid=4833 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1189412258.686:35): user pid=4834 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_END msg=audit(1189412265.979:36): user pid=3988 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189412571.028:37): user pid=5569 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189412571.028:38): user pid=5569 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189412571.030:39): user pid=5569 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189412571.037:40): user pid=5569 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189412571.037:41): user pid=5569 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189412663.004:42): user pid=5611 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189412663.004:43): user pid=5611 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189412663.005:44): user pid=5611 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189412663.012:45): user pid=5611 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189412663.012:46): user pid=5611 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1189414195.318:47): user pid=6464 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)'
>type=USER_AUTH msg=audit(1189414198.909:48): user pid=6464 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)'
>type=USER_AUTH msg=audit(1189414218.873:49): user pid=6484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189414218.874:50): user pid=6484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189414218.875:51): user pid=6484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189414218.877:52): user pid=6484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189414218.877:53): user pid=6484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189414862.051:54): user pid=6623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189418461.101:55): user pid=7018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189418541.679:56): user pid=7061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189418541.679:57): user pid=7061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189418541.681:58): user pid=7061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189418541.682:59): user pid=7061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189418541.683:60): user pid=7061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189418559.609:61): user pid=7065 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189418559.610:62): user pid=7065 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189418559.610:63): user pid=7065 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189418619.446:64): user pid=7076 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189418619.446:65): user pid=7076 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189418619.446:66): user pid=7076 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189418759.126:67): user pid=7159 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189418759.128:68): user pid=7159 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189418759.128:69): user pid=7159 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189418788.595:70): user pid=7235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189418788.600:71): user pid=7235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189418788.600:72): user pid=7235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1189421976.125:73): user pid=8195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189421976.125:74): user pid=8195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189421976.127:75): user pid=8195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189421976.129:76): user pid=8195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189421976.129:77): user pid=8195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189422061.171:78): user pid=8212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189424108.902:79): user pid=8500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189424108.902:80): user pid=8500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189424108.903:81): user pid=8500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189424108.908:82): user pid=8500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189424108.908:83): user pid=8500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189424316.474:84): user pid=8590 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189424316.475:85): user pid=8590 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189424316.475:86): user pid=8590 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189424336.087:87): user pid=8592 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189424336.087:88): user pid=8592 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189424336.087:89): user pid=8592 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189424349.853:90): user pid=8594 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189424349.853:91): user pid=8594 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189424349.854:92): user pid=8594 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189424512.152:93): user pid=8615 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189424512.152:94): user pid=8615 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189424512.152:95): user pid=8615 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189424529.436:96): user pid=8616 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189424529.437:97): user pid=8616 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189424529.437:98): user pid=8616 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189424535.695:99): user pid=8617 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189424535.695:100): user pid=8617 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189424535.695:101): user pid=8617 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189424597.932:102): user pid=8621 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189424597.933:103): user pid=8621 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189424597.933:104): user pid=8621 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189424646.151:105): user pid=8623 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189424646.151:106): user pid=8623 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189424646.151:107): user pid=8623 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189424680.177:108): user pid=8644 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189424680.182:109): user pid=8644 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189424680.182:110): user pid=8644 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189425661.212:111): user pid=9199 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189426380.397:112): user pid=17403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189426380.397:113): user pid=17403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189426380.399:114): user pid=17403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189426380.404:115): user pid=17403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189426380.405:116): user pid=17403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189426520.893:117): user pid=2949 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189426520.894:118): user pid=2949 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189426524.817:119): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2581 comm="dhcdbd" sig=6
>type=AVC msg=audit(1189426532.950:120): avc:  denied  { read write } for  pid=17973 comm="modprobe" name="" dev=sockfs ino=558457 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189426532.950:120): avc:  denied  { read write } for  pid=17973 comm="modprobe" name="" dev=sockfs ino=558458 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189426532.950:120): arch=40000003 syscall=11 success=yes exit=0 a0=9327530 a1=bf8d5608 a2=bf8d7ee0 a3=9327530 items=0 ppid=17972 pid=17973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189426532.950:120):  path="socket:[558458]"
>type=AVC_PATH msg=audit(1189426532.950:120):  path="socket:[558457]"
>type=ANOM_ABEND msg=audit(1189426535.014:121): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1981 comm="named" sig=6
>type=DAEMON_END msg=audit(1189426537.482:1578): auditd normal halt, sending auid=4294967295 pid=18416 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1900
>type=DAEMON_START msg=audit(1189428981.860:7803): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1904 res=success, auditd pid=1904
>type=CONFIG_CHANGE msg=audit(1189428981.960:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189428981.960:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189428982.227:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189428982.227:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189428989.696:9): avc:  denied  { read write } for  pid=2220 comm="modprobe" name="" dev=sockfs ino=9334 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189428989.696:9): avc:  denied  { read write } for  pid=2220 comm="modprobe" name="" dev=sockfs ino=9348 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189428989.696:9): arch=40000003 syscall=11 success=yes exit=0 a0=8233710 a1=bfa23568 a2=bfa269a0 a3=8233710 items=0 ppid=2181 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189428989.696:9):  path="socket:[9348]"
>type=AVC_PATH msg=audit(1189428989.696:9):  path="socket:[9334]"
>type=AVC msg=audit(1189428989.821:10): avc:  denied  { write } for  pid=2019 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189428989.821:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf973780 a2=63a494 a3=0 items=0 ppid=1 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1189429004.579:11): user pid=2850 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189429015.731:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2733 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189429027.098:13): user pid=2945 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189429027.101:14): user pid=2945 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189429027.102:15): user pid=2945 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189429027.107:16): login pid=2945 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189429027.127:17): user pid=2945 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189429027.128:18): user pid=2945 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1189429106.809:19): user pid=3338 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189429106.810:20): user pid=3338 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189429106.811:21): user pid=3338 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189429106.820:22): user pid=3338 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189429106.820:23): user pid=3338 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189429261.690:24): user pid=3430 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1189429702.499:25): user pid=3735 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189430939.983:26): user pid=4069 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189431855.499:27): user pid=4630 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189432290.947:28): user pid=4945 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1189432421.115:6897): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1929 res=success, auditd pid=1929
>type=CONFIG_CHANGE msg=audit(1189432421.215:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189432421.215:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189432421.287:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189432421.287:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189432428.470:9): avc:  denied  { read write } for  pid=2247 comm="modprobe" name="" dev=sockfs ino=9153 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189432428.470:9): avc:  denied  { read write } for  pid=2247 comm="modprobe" name="" dev=sockfs ino=9165 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189432428.470:9): arch=40000003 syscall=11 success=yes exit=0 a0=8a04710 a1=bfbf0db8 a2=bfbf41f0 a3=8a04710 items=0 ppid=2206 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189432428.470:9):  path="socket:[9165]"
>type=AVC_PATH msg=audit(1189432428.470:9):  path="socket:[9153]"
>type=AVC msg=audit(1189432428.470:10): avc:  denied  { write } for  pid=2044 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189432428.470:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb47150 a2=63a494 a3=0 items=0 ppid=1 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1189432442.778:11): user pid=2875 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1189432454.930:12): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189432454.934:13): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189432454.935:14): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189432454.939:15): login pid=2983 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189432454.960:16): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189432454.962:17): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189432861.209:18): user pid=3581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189433096.345:19): user pid=3693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)'
>type=USER_AUTH msg=audit(1189433099.490:20): user pid=3693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189433099.491:21): user pid=3693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189433099.492:22): user pid=3693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189433099.494:23): user pid=3693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189433099.494:24): user pid=3693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_LOGIN msg=audit(1189433848.995:25): user pid=3750 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.10, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1189433860.297:26): user pid=3750 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1189433860.297:27): user pid=3750 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1189433860.395:28): user pid=3750 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=LOGIN msg=audit(1189433860.396:29): login pid=3750 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1189433860.396:30): user pid=3750 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1189433860.397:31): user pid=3753 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1189433860.491:32): user pid=3750 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=USER_END msg=audit(1189433860.491:33): user pid=3750 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)'
>type=USER_AUTH msg=audit(1189433869.262:34): user pid=3772 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)'
>type=USER_AUTH msg=audit(1189433871.911:35): user pid=3772 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189433871.911:36): user pid=3772 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189433871.912:37): user pid=3772 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189433871.916:38): user pid=3772 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189433871.916:39): user pid=3772 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1189435006.187:40): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1189435010.508:41): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1189435011.825:42): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189435011.825:43): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189435011.826:44): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189435011.832:45): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189435011.832:46): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189435130.955:47): user pid=4516 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189435130.955:48): user pid=4516 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189435130.957:49): user pid=4516 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189435130.962:50): user pid=4516 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189435130.962:51): user pid=4516 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189436461.571:52): user pid=4961 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189436654.602:53): user pid=4983 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189436654.603:54): user pid=4983 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189436654.604:55): user pid=4983 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189436654.610:56): user pid=4983 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189436654.610:57): user pid=4983 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1189437790.606:58): user pid=5212 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189437790.607:59): user pid=5212 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189437790.608:60): user pid=5212 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189437790.612:61): user pid=5212 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189437790.612:62): user pid=5212 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189437995.098:63): user pid=5295 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189437995.106:64): user pid=5295 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189437995.106:65): user pid=5295 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189438005.678:66): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189438005.678:66): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfbf9ce8 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189438012.434:67): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189438030.606:68): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189438030.606:68): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfbf9ce8 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189438685.571:69): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=5444 comm="virt-viewer" sig=11
>type=USER_ACCT msg=audit(1189440061.585:70): user pid=5967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189440106.129:71): user pid=5975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189440106.129:72): user pid=5975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189440106.176:73): user pid=5975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189440106.186:74): user pid=5975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189440106.186:75): user pid=5975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189440114.270:76): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189441214.547:77): user pid=6179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=failed)'
>type=USER_AUTH msg=audit(1189441216.553:78): user pid=6179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189441216.553:79): user pid=6179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1189441216.584:80): user pid=6179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189441216.590:81): user pid=6179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189441216.590:82): user pid=6179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189443661.902:83): user pid=6857 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189443890.558:84): user pid=6934 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189443890.558:85): user pid=6934 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189443890.559:86): user pid=6934 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189443890.561:87): user pid=6934 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189443890.561:88): user pid=6934 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1189444503.685:89): user pid=7850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189444503.685:90): user pid=7850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189444503.686:91): user pid=7850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189444503.689:92): user pid=7850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189444503.689:93): user pid=7850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189444506.460:94): user pid=7851 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189444506.464:95): user pid=7851 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189444506.464:96): user pid=7851 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189444567.435:97): user pid=7901 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189444567.440:98): user pid=7901 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189444567.440:99): user pid=7901 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USYS_CONFIG msg=audit(1189445162.499:100): user pid=8514 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189445639.379:101): user pid=8874 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1189445639.300:102): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:bluetooth_t:s0 pid=2136 comm="hcid" sig=6
>type=USER_ACCT msg=audit(1189447261.456:103): user pid=9873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189447763.309:104): user pid=10085 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189447763.309:105): user pid=10085 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1189447780.499:106): user pid=10316 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1189454299.114:49): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1941 res=success, auditd pid=1941
>type=CONFIG_CHANGE msg=audit(1189454299.214:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189454299.214:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189454299.273:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189454299.273:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189454306.066:9): avc:  denied  { read write } for  pid=2257 comm="modprobe" name="" dev=sockfs ino=9232 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189454306.066:9): avc:  denied  { read write } for  pid=2257 comm="modprobe" name="" dev=sockfs ino=9254 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189454306.066:9): arch=40000003 syscall=11 success=yes exit=0 a0=86a3710 a1=bfd71648 a2=bfd74a80 a3=86a3710 items=0 ppid=2217 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189454306.066:9):  path="socket:[9254]"
>type=AVC_PATH msg=audit(1189454306.066:9):  path="socket:[9232]"
>type=AVC msg=audit(1189454306.359:10): avc:  denied  { write } for  pid=2056 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189454306.359:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf823ad0 a2=63a494 a3=0 items=0 ppid=1 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1189454320.055:11): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189454324.740:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2770 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189454366.510:13): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189454366.513:14): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189454366.514:15): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189454366.519:16): login pid=2994 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189454366.528:17): user pid=2994 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189454366.529:18): user pid=2994 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1189454425.150:19): user pid=3431 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189454425.151:20): user pid=3431 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189454425.279:21): user pid=3431 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189454462.018:22): user pid=3440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1189454997.740:23): user pid=3431 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189455727.736:24): user pid=3711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189455727.737:25): user pid=3711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189455727.738:26): user pid=3711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189455727.739:27): user pid=3711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189455727.739:28): user pid=3711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189455737.123:29): user pid=3718 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189455737.123:30): user pid=3718 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189455737.123:31): user pid=3718 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189455807.008:32): user pid=3747 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189455807.010:33): user pid=3747 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189455807.010:34): user pid=3747 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189456340.643:35): user pid=3882 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189456340.644:36): user pid=3882 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189456340.662:37): user pid=3882 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1189456395.373:38): user pid=3882 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189456463.423:39): user pid=3947 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189456463.423:40): user pid=3947 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189456463.450:41): user pid=3947 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189456463.450:42): user pid=3947 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189456463.450:43): user pid=3947 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189458061.189:44): user pid=4209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189460139.193:45): user pid=4458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189460139.193:46): user pid=4458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189460139.201:47): user pid=4458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1189460440.337:48): user pid=4458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189460451.858:49): user pid=4537 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1189460487.101:50): user pid=4546 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189460487.101:51): user pid=4546 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189460487.102:52): user pid=4546 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189460487.108:53): user pid=4546 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189460487.108:54): user pid=4546 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189460489.427:55): user pid=4577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189460489.427:56): user pid=4577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189460489.463:57): user pid=4577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189460727.396:58): user pid=4632 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189460727.402:59): user pid=4632 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189460727.403:60): user pid=4632 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189460729.207:61): user pid=4663 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189460729.207:62): user pid=4663 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189460729.211:63): user pid=4663 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1189460898.562:64): user pid=4682 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=jackuser exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1189461183.668:65): user pid=14508 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189461183.668:66): user pid=14508 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189461183.724:67): user pid=14508 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189461183.756:68): user pid=14508 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189461183.756:69): user pid=14508 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189461454.250:70): user pid=4663 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189461533.805:71): user pid=14670 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189461533.805:72): user pid=14670 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189461533.855:73): user pid=14670 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1189461591.038:74): user pid=14670 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189461661.374:75): user pid=14738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189462577.052:76): user pid=14948 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189462577.052:77): user pid=14948 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1189462685.983:78): user pid=15012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189462685.984:79): user pid=15012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1189462686.045:80): user pid=15012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189462686.052:81): user pid=15012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189462686.052:82): user pid=15012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1189462690.943:83): user pid=15043 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189462690.943:84): user pid=15043 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USYS_CONFIG msg=audit(1189462696.500:85): user pid=15302 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_START msg=audit(1189462812.892:9287): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1934 res=success, auditd pid=1934
>type=CONFIG_CHANGE msg=audit(1189462812.992:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189462812.992:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189462813.109:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189462813.109:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189462819.907:9): avc:  denied  { read write } for  pid=2250 comm="modprobe" name="" dev=sockfs ino=9201 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189462819.907:9): avc:  denied  { read write } for  pid=2250 comm="modprobe" name="" dev=sockfs ino=9215 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189462819.907:9): arch=40000003 syscall=11 success=yes exit=0 a0=936b710 a1=bf916de8 a2=bf91a220 a3=936b710 items=0 ppid=2211 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189462819.907:9):  path="socket:[9215]"
>type=AVC_PATH msg=audit(1189462819.907:9):  path="socket:[9201]"
>type=AVC msg=audit(1189462820.232:10): avc:  denied  { write } for  pid=2049 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189462820.232:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8ba6d0 a2=63a494 a3=0 items=0 ppid=1 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ERR msg=audit(1189462833.812:11): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189462844.619:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2760 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189462847.608:13): user pid=2981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189462847.611:14): user pid=2981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189462847.612:15): user pid=2981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189462847.618:16): login pid=2981 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189462847.639:17): user pid=2981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189462847.641:18): user pid=2981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1189462930.438:19): user pid=3471 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_AUTH msg=audit(1189462933.000:20): user pid=3471 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189462933.000:21): user pid=3471 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189462933.001:22): user pid=3471 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189462933.010:23): user pid=3471 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189462933.010:24): user pid=3471 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1189463166.682:25): user pid=4291 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189463166.682:26): user pid=4291 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1189463170.500:27): user pid=4517 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189463188.565:28): user pid=4840 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1189463303.851:29): user pid=2981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189463303.851:30): user pid=2981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189463323.710:31): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2614 comm="dhcdbd" sig=6
>type=AVC msg=audit(1189463329.280:32): avc:  denied  { read write } for  pid=5588 comm="modprobe" name="" dev=sockfs ino=29128 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189463329.280:32): avc:  denied  { read write } for  pid=5588 comm="modprobe" name="" dev=sockfs ino=29129 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189463329.280:32): arch=40000003 syscall=11 success=yes exit=0 a0=83a7530 a1=bfb950c8 a2=bfb979a0 a3=83a7530 items=0 ppid=5587 pid=5588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189463329.280:32):  path="socket:[29129]"
>type=AVC_PATH msg=audit(1189463329.280:32):  path="socket:[29128]"
>type=ANOM_ABEND msg=audit(1189463330.573:33): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2015 comm="named" sig=6
>type=DAEMON_END msg=audit(1189463330.973:9288): auditd normal halt, sending auid=4294967295 pid=6029 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1934
>type=DAEMON_START msg=audit(1189463408.182:7792): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1905 res=success, auditd pid=1905
>type=CONFIG_CHANGE msg=audit(1189463408.281:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189463408.281:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189463408.622:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189463408.622:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189463414.356:9): avc:  denied  { read write } for  pid=2118 comm="hid2hci" name="001" dev=tmpfs ino=5490 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1189463414.356:9): arch=40000003 syscall=5 success=no exit=-13 a0=bfc0b03c a1=2 a2=1 a3=bfc0b03c items=0 ppid=2105 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null)
>type=AVC msg=audit(1189463414.356:10): avc:  denied  { read } for  pid=2118 comm="hid2hci" name="001" dev=tmpfs ino=5490 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1189463414.356:10): arch=40000003 syscall=5 success=no exit=-13 a0=bfc0b03c a1=0 a2=1 a3=bfc0b03c items=0 ppid=2105 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null)
>type=AVC msg=audit(1189463415.741:11): avc:  denied  { write } for  pid=2020 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189463415.741:11): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa2c030 a2=63a494 a3=0 items=0 ppid=1 pid=2020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1189463416.015:12): avc:  denied  { read write } for  pid=2223 comm="modprobe" name="" dev=sockfs ino=9172 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189463416.015:12): avc:  denied  { read write } for  pid=2223 comm="modprobe" name="" dev=sockfs ino=9182 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189463416.015:12): arch=40000003 syscall=11 success=yes exit=0 a0=87bf710 a1=bf9a6368 a2=bf9a97a0 a3=87bf710 items=0 ppid=2183 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189463416.015:12):  path="socket:[9182]"
>type=AVC_PATH msg=audit(1189463416.015:12):  path="socket:[9172]"
>type=USER_ERR msg=audit(1189463431.314:13): user pid=2851 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189463433.995:14): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2721 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189463445.082:15): user pid=2957 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189463445.086:16): user pid=2957 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189463445.086:17): user pid=2957 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189463445.089:18): login pid=2957 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189463445.098:19): user pid=2957 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189463445.099:20): user pid=2957 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1189463522.517:21): user pid=3360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189463522.517:22): user pid=3360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1189463526.500:23): user pid=3592 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189463540.098:24): user pid=3911 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189463574.462:25): user pid=4048 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189463574.462:26): user pid=4048 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189463598.735:27): user pid=4051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1189463601.865:28): user pid=4051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189463601.865:29): user pid=4051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189463601.866:30): user pid=4051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189463601.873:31): user pid=4051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189463601.873:32): user pid=4051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189463809.105:33): user pid=4496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189463809.106:34): user pid=4496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189463809.183:35): user pid=4496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189463809.193:36): user pid=4496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189463809.193:37): user pid=4496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1189464419.162:38): user pid=4679 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189464419.162:39): user pid=4679 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189464426.238:40): user pid=4681 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189464426.238:41): user pid=4681 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USYS_CONFIG msg=audit(1189464430.500:42): user pid=4891 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189486312.313:43): user pid=5243 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189486339.509:44): user pid=5403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189486339.509:45): user pid=5403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189486339.511:46): user pid=5403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189486339.518:47): user pid=5403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189486339.518:48): user pid=5403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189486861.632:49): user pid=5526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189487082.538:50): user pid=5620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189487082.538:51): user pid=5620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189487082.540:52): user pid=5620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189487082.548:53): user pid=5620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189487082.548:54): user pid=5620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189487242.099:55): user pid=5717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189487242.107:56): user pid=5717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189487242.107:57): user pid=5717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189490461.706:58): user pid=8121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189492720.002:59): user pid=8435 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1189492724.085:60): user pid=8436 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189492724.086:61): user pid=8436 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189492724.086:62): user pid=8436 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189492724.089:63): user pid=8436 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189492724.089:64): user pid=8436 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189492729.326:65): user pid=8437 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189492729.328:66): user pid=8437 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189492729.328:67): user pid=8437 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189492762.540:68): user pid=8442 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189492762.540:69): user pid=8442 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189492762.540:70): user pid=8442 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189492764.179:71): user pid=8443 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189492764.180:72): user pid=8443 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189492764.180:73): user pid=8443 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189492804.599:74): user pid=8446 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189492804.601:75): user pid=8446 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189492804.601:76): user pid=8446 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1189493731.093:77): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189493731.093:78): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189493731.094:79): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189493731.102:80): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189493731.103:81): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189494061.754:82): user pid=8721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189494186.550:83): user pid=8732 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189494186.551:84): user pid=8732 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189494186.552:85): user pid=8732 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189494186.561:86): user pid=8732 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189494186.561:87): user pid=8732 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1189497444.694:88): user pid=9261 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189497444.694:89): user pid=9261 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USYS_CONFIG msg=audit(1189497449.499:90): user pid=9393 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189498811.200:91): user pid=9545 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189500407.410:92): user pid=9949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189500407.410:93): user pid=9949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189500407.447:94): user pid=9949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189500407.454:95): user pid=9949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189500407.454:96): user pid=9949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1189500451.172:97): avc:  denied  { getattr } for  pid=10002 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=6044382 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500451.172:97): arch=40000003 syscall=195 success=no exit=-13 a0=bf9c64a8 a1=bf9c5394 a2=816ff4 a3=d items=0 ppid=10001 pid=10002 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500451.172:97):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500451.174:98): avc:  denied  { getattr } for  pid=10002 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=6044382 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500451.174:98): arch=40000003 syscall=195 success=no exit=-13 a0=8e7b1d0 a1=bf9c825c a2=816ff4 a3=4 items=0 ppid=10001 pid=10002 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500451.174:98):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500579.268:99): avc:  denied  { getattr } for  pid=10090 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500579.268:99): arch=40000003 syscall=195 success=no exit=-13 a0=bf9a2b08 a1=bf9a19f4 a2=816ff4 a3=d items=0 ppid=10089 pid=10090 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500579.268:99):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500579.309:100): avc:  denied  { getattr } for  pid=10092 comm="hald-generate-f" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500579.309:100): arch=40000003 syscall=195 success=no exit=-13 a0=9bd9090 a1=bfa3954c a2=816ff4 a3=1 items=0 ppid=10091 pid=10092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hald-generate-f" exe="/usr/libexec/hald-generate-fdi-cache" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500579.309:100):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500579.309:101): avc:  denied  { getattr } for  pid=10092 comm="hald-generate-f" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500579.309:101): arch=40000003 syscall=195 success=no exit=-13 a0=9bd9090 a1=bfa3954c a2=816ff4 a3=4 items=0 ppid=10091 pid=10092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hald-generate-f" exe="/usr/libexec/hald-generate-fdi-cache" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500579.309:101):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500579.462:102): avc:  denied  { getattr } for  pid=10090 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500579.462:102): arch=40000003 syscall=195 success=no exit=-13 a0=a0075d8 a1=bf9a48bc a2=816ff4 a3=4 items=0 ppid=10089 pid=10090 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500579.462:102):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500681.549:103): avc:  denied  { getattr } for  pid=10187 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850718 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500681.549:103): arch=40000003 syscall=195 success=no exit=-13 a0=bfa8f3e8 a1=bfa8e2d4 a2=816ff4 a3=d items=0 ppid=10186 pid=10187 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500681.549:103):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500681.627:104): avc:  denied  { getattr } for  pid=10189 comm="hald-generate-f" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850718 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500681.627:104): arch=40000003 syscall=195 success=no exit=-13 a0=9b1c090 a1=bff77a8c a2=816ff4 a3=1 items=0 ppid=10188 pid=10189 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hald-generate-f" exe="/usr/libexec/hald-generate-fdi-cache" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500681.627:104):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500681.627:105): avc:  denied  { getattr } for  pid=10189 comm="hald-generate-f" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850718 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500681.627:105): arch=40000003 syscall=195 success=no exit=-13 a0=9b1c090 a1=bff77a8c a2=816ff4 a3=4 items=0 ppid=10188 pid=10189 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hald-generate-f" exe="/usr/libexec/hald-generate-fdi-cache" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500681.627:105):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500681.783:106): avc:  denied  { getattr } for  pid=10187 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850718 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500681.783:106): arch=40000003 syscall=195 success=no exit=-13 a0=9dbd5d8 a1=bfa9119c a2=816ff4 a3=4 items=0 ppid=10186 pid=10187 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500681.783:106):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500744.292:107): avc:  denied  { getattr } for  pid=10278 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500744.292:107): arch=40000003 syscall=195 success=no exit=-13 a0=bfda7708 a1=bfda65f4 a2=816ff4 a3=d items=0 ppid=10277 pid=10278 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500744.292:107):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500744.330:108): avc:  denied  { getattr } for  pid=10280 comm="hald-generate-f" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500744.330:108): arch=40000003 syscall=195 success=no exit=-13 a0=85b7090 a1=bfbb9ecc a2=816ff4 a3=1 items=0 ppid=10279 pid=10280 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hald-generate-f" exe="/usr/libexec/hald-generate-fdi-cache" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500744.330:108):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500744.330:109): avc:  denied  { getattr } for  pid=10280 comm="hald-generate-f" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500744.330:109): arch=40000003 syscall=195 success=no exit=-13 a0=85b7090 a1=bfbb9ecc a2=816ff4 a3=4 items=0 ppid=10279 pid=10280 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hald-generate-f" exe="/usr/libexec/hald-generate-fdi-cache" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500744.330:109):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189500744.448:110): avc:  denied  { getattr } for  pid=10278 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189500744.448:110): arch=40000003 syscall=195 success=no exit=-13 a0=8adf5d8 a1=bfda94bc a2=816ff4 a3=4 items=0 ppid=10277 pid=10278 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189500744.448:110):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=USER_AUTH msg=audit(1189501137.753:111): user pid=10426 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189501137.753:112): user pid=10426 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189501137.795:113): user pid=10426 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1189501163.639:114): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=10306 comm="hald-addon-acpi" sig=11
>type=USER_ACCT msg=audit(1189501261.614:115): user pid=10447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1189501303.128:116): user pid=10426 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189501413.487:117): user pid=10476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189501413.488:118): user pid=10476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1189501413.489:119): user pid=10476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189501413.496:120): user pid=10476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189501413.496:121): user pid=10476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1189503536.904:122): user pid=10956 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189503536.904:123): user pid=10956 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1189503536.905:124): user pid=10956 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189503536.910:125): user pid=10956 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189503536.910:126): user pid=10956 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1189503544.648:127): user pid=10957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189503544.650:128): user pid=10957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189503544.650:129): user pid=10957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=AVC msg=audit(1189503547.723:130): avc:  denied  { getattr } for  pid=10974 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189503547.723:130): arch=40000003 syscall=195 success=no exit=-13 a0=bf8ff738 a1=bf8fe624 a2=816ff4 a3=d items=0 ppid=10973 pid=10974 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189503547.723:130):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189503547.725:131): avc:  denied  { getattr } for  pid=10974 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189503547.725:131): arch=40000003 syscall=195 success=no exit=-13 a0=a00f1d0 a1=bf9014ec a2=816ff4 a3=4 items=0 ppid=10973 pid=10974 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189503547.725:131):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=USER_AUTH msg=audit(1189504325.302:132): user pid=11108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189504325.303:133): user pid=11108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1189504325.304:134): user pid=11108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189504325.307:135): user pid=11108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189504325.307:136): user pid=11108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1189504327.788:137): user pid=11109 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189504327.789:138): user pid=11109 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189504327.789:139): user pid=11109 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=AVC msg=audit(1189504330.896:140): avc:  denied  { getattr } for  pid=11126 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189504330.896:140): arch=40000003 syscall=195 success=no exit=-13 a0=bfe88fe8 a1=bfe87ed4 a2=816ff4 a3=d items=0 ppid=11125 pid=11126 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189504330.896:140):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189504330.898:141): avc:  denied  { getattr } for  pid=11126 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189504330.898:141): arch=40000003 syscall=195 success=no exit=-13 a0=8b501d0 a1=bfe8ad9c a2=816ff4 a3=4 items=0 ppid=11125 pid=11126 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189504330.898:141):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=CRED_ACQ msg=audit(1189504437.822:142): user pid=11200 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189504437.823:143): user pid=11200 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189504437.824:144): user pid=11200 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1189504440.354:145): user pid=11201 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189504440.356:146): user pid=11201 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189504440.356:147): user pid=11201 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=AVC msg=audit(1189504443.433:148): avc:  denied  { getattr } for  pid=11218 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189504443.433:148): arch=40000003 syscall=195 success=no exit=-13 a0=bfd0b668 a1=bfd0a554 a2=816ff4 a3=d items=0 ppid=11217 pid=11218 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189504443.433:148):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189504443.435:149): avc:  denied  { getattr } for  pid=11218 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189504443.435:149): arch=40000003 syscall=195 success=no exit=-13 a0=94871d0 a1=bfd0d41c a2=816ff4 a3=4 items=0 ppid=11217 pid=11218 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189504443.435:149):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=USER_ACCT msg=audit(1189504861.702:150): user pid=17587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189504893.491:151): user pid=17592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189504893.491:152): user pid=17592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1189504948.823:153): user pid=17593 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189504948.823:154): user pid=17593 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1189504948.824:155): user pid=17593 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189504948.834:156): user pid=17593 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189504948.834:157): user pid=17593 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=ANOM_ABEND msg=audit(1189505782.349:158): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=11245 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189507146.419:159): user pid=30854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189507146.419:160): user pid=30854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189507146.420:161): user pid=30854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189507146.427:162): user pid=30854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189507146.427:163): user pid=30854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189507155.523:164): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189507155.523:164): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb89478 a3=6 items=0 ppid=1 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189507167.505:165): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189507173.117:166): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189507173.117:166): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb89478 a3=6 items=0 ppid=1 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1189507981.719:167): user pid=31233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189507981.719:168): user pid=31233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189507981.994:169): user pid=31233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189508461.826:170): user pid=31307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1189511599.138:171): user pid=31233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189512061.855:172): user pid=31718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1189514686.115:173): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=30965 comm="virt-viewer" sig=11
>type=USER_AUTH msg=audit(1189514742.857:174): user pid=4056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189514742.857:175): user pid=4056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189514742.972:176): user pid=4056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189514742.985:177): user pid=4056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189514742.985:178): user pid=4056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189514755.306:179): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189514755.307:180): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189514755.307:181): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189514755.544:182): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189515146.638:183): user pid=4243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189515146.639:184): user pid=4243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189515146.639:185): user pid=4243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189515146.641:186): user pid=4243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189515146.641:187): user pid=4243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189515165.569:188): user pid=4250 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189515165.571:189): user pid=4250 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189515165.571:190): user pid=4250 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1189515169.360:191): avc:  denied  { getattr } for  pid=4267 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189515169.360:191): arch=40000003 syscall=195 success=no exit=-13 a0=bfdbaf18 a1=bfdb9e04 a2=816ff4 a3=d items=0 ppid=4266 pid=4267 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189515169.360:191):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189515169.442:192): avc:  denied  { getattr } for  pid=4267 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189515169.442:192): arch=40000003 syscall=195 success=no exit=-13 a0=8e8b1d0 a1=bfdbcccc a2=816ff4 a3=4 items=0 ppid=4266 pid=4267 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189515169.442:192):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=CRED_ACQ msg=audit(1189515191.198:193): user pid=4327 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189515191.205:194): user pid=4327 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189515191.205:195): user pid=4327 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189515661.816:196): user pid=4551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1189515889.713:197): avc:  denied  { getattr } for  pid=4596 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189515889.713:197): arch=40000003 syscall=195 success=no exit=-13 a0=bf935288 a1=bf934174 a2=816ff4 a3=d items=0 ppid=4595 pid=4596 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189515889.713:197):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189515889.715:198): avc:  denied  { getattr } for  pid=4596 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189515889.715:198): arch=40000003 syscall=195 success=no exit=-13 a0=86f31d0 a1=bf93703c a2=816ff4 a3=4 items=0 ppid=4595 pid=4596 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189515889.715:198):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=ANOM_ABEND msg=audit(1189516126.067:199): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=4623 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189517303.444:200): user pid=4841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189517303.444:201): user pid=4841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189517303.446:202): user pid=4841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189517303.451:203): user pid=4841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189517303.451:204): user pid=4841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1189517896.323:205): user pid=5142 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189517896.323:206): user pid=5142 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189517896.352:207): user pid=5142 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189517896.355:208): user pid=5142 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189517896.355:209): user pid=5142 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_ABEND msg=audit(1189518499.379:210): auid=500 uid=68 gid=68 subj=user_u:system_r:unconfined_t:s0 pid=5126 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189518665.660:211): user pid=5372 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189518665.660:212): user pid=5372 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189518665.661:213): user pid=5372 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189518665.667:214): user pid=5372 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189518665.667:215): user pid=5372 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1189518839.602:216): avc:  denied  { sendto } for  pid=5425 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518839.602:216): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8a items=0 ppid=599 pid=5425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1189518865.697:217): user pid=2957 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189518865.697:218): user pid=2957 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1189518870.341:219): avc:  denied  { sendto } for  pid=5453 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189518870.341:220): avc:  denied  { sendto } for  pid=5454 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518870.341:220): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=5454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189518870.341:219): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=5453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518871.621:221): avc:  denied  { sendto } for  pid=5456 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189518871.621:222): avc:  denied  { sendto } for  pid=5457 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518871.621:221): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=5456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189518871.621:222): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=5457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518871.724:223): avc:  denied  { sendto } for  pid=5461 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518871.724:223): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=5461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518871.725:224): avc:  denied  { sendto } for  pid=5462 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518871.725:224): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=5462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518871.731:225): avc:  denied  { sendto } for  pid=5465 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518871.731:225): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518871.731:226): avc:  denied  { sendto } for  pid=5466 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518871.731:226): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=5466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518907.848:227): avc:  denied  { sendto } for  pid=5491 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518907.848:227): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=5491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518907.848:228): avc:  denied  { sendto } for  pid=5490 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518907.848:228): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=5490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518908.910:229): avc:  denied  { sendto } for  pid=5494 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518908.910:229): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518908.911:230): avc:  denied  { sendto } for  pid=5495 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518908.911:230): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=5495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518909.011:231): avc:  denied  { sendto } for  pid=5499 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518909.011:231): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=5499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518909.013:232): avc:  denied  { sendto } for  pid=5501 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518909.013:232): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=5501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518909.017:233): avc:  denied  { sendto } for  pid=5500 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518909.017:233): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=5500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189518909.018:234): avc:  denied  { sendto } for  pid=5502 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189518909.018:234): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=5502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1189518929.640:235): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1189518929.640:236): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1189518929.646:237): login pid=2845 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1189518929.820:238): user pid=2845 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1189518929.887:239): user pid=2845 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1189518929.887:240): user pid=2845 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1189518929.889:241): user pid=2845 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1189518946.295:242): user pid=2845 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1189518946.296:243): user pid=2845 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1189518957.771:244): user pid=5492 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189518957.775:245): user pid=5492 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189518957.776:246): user pid=5492 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189518957.780:247): login pid=5492 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189518957.828:248): user pid=5492 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189518957.828:249): user pid=5492 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1189519034.111:250): avc:  denied  { sendto } for  pid=5955 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189519034.111:250): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=84 items=0 ppid=599 pid=5955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1189519261.940:251): user pid=6023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189520000.673:252): user pid=18519 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189520000.673:253): user pid=18519 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189520000.719:254): user pid=18519 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189520000.739:255): user pid=18519 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189520000.739:256): user pid=18519 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=MAC_POLICY_LOAD msg=audit(1189520024.123:257): policy loaded auid=500
>type=SYSCALL msg=audit(1189520024.123:257): arch=40000003 syscall=4 success=yes exit=1587243 a0=4 a1=b7dbc000 a2=18382b a3=bfefac68 items=0 ppid=18528 pid=18529 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1189520024.433:258): user pid=2100 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AUTH msg=audit(1189520792.761:259): user pid=18814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189520792.761:260): user pid=18814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189520792.762:261): user pid=18814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189520792.768:262): user pid=18814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189520792.768:263): user pid=18814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189520798.983:264): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189520798.983:264): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb89478 a3=6 items=0 ppid=1 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1189520799.573:265): avc:  denied  { sendto } for  pid=18847 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189520799.573:265): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=87 items=0 ppid=599 pid=18847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189520815.821:266): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=AVC msg=audit(1189520819.513:267): avc:  denied  { sendto } for  pid=18873 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189520819.513:267): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8d items=0 ppid=599 pid=18873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189520976.698:268): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189520976.698:268): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb89478 a3=6 items=0 ppid=1 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1189520977.333:269): avc:  denied  { sendto } for  pid=18894 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189520977.333:269): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=87 items=0 ppid=599 pid=18894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189520980.742:270): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=AVC msg=audit(1189520981.444:271): avc:  denied  { sendto } for  pid=18919 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189520981.444:271): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8d items=0 ppid=599 pid=18919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189521084.856:272): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189521084.856:272): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb89478 a3=6 items=0 ppid=1 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1189521085.063:273): avc:  denied  { sendto } for  pid=18940 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189521085.063:273): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=87 items=0 ppid=599 pid=18940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1189522715.799:274): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=19013 comm="virt-viewer" sig=11
>type=USER_AUTH msg=audit(1189522776.186:275): user pid=19639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189522776.186:276): user pid=19639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189522776.240:277): user pid=19639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189522776.264:278): user pid=19639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189522776.264:279): user pid=19639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189522820.703:280): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=AVC msg=audit(1189522821.430:281): avc:  denied  { sendto } for  pid=19679 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189522821.430:281): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8d items=0 ppid=599 pid=19679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1189522862.141:282): user pid=19721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189524747.084:283): user pid=20967 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189524747.084:284): user pid=20967 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189524747.085:285): user pid=20967 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189524747.089:286): user pid=20967 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189524747.089:287): user pid=20967 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189526009.816:288): user pid=21583 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189526009.817:289): user pid=21583 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189526009.817:290): user pid=21583 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189526009.819:291): user pid=21583 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189526009.820:292): user pid=21583 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1189526193.465:293): user pid=21719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189526193.465:294): user pid=21719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189526193.466:295): user pid=21719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189526193.475:296): user pid=21719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189526193.475:297): user pid=21719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189526461.270:298): user pid=21797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189527185.804:299): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189527185.804:299): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb89478 a3=6 items=0 ppid=1 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1189527186.168:300): avc:  denied  { sendto } for  pid=21940 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189527186.168:300): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=87 items=0 ppid=599 pid=21940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1189528763.044:301): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=21969 comm="virt-viewer" sig=11
>type=ANOM_PROMISCUOUS msg=audit(1189528892.271:302): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=AVC msg=audit(1189528893.188:303): avc:  denied  { sendto } for  pid=22116 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189528893.188:303): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189528893.226:304): avc:  denied  { sendto } for  pid=22080 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189528893.226:304): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8d items=0 ppid=599 pid=22080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189528894.377:305): avc:  denied  { sendto } for  pid=22141 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189528894.377:305): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8a items=0 ppid=599 pid=22141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189529225.224:306): dev=vnet0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1189529225.224:306): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8b9e88 a3=6 items=0 ppid=1 pid=22138 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1189529225.530:307): avc:  denied  { sendto } for  pid=22209 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189529225.530:307): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=87 items=0 ppid=599 pid=22209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1189530062.062:308): user pid=22309 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189530260.751:309): user pid=22335 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189530260.751:310): user pid=22335 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189530260.822:311): user pid=22335 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189530260.823:312): user pid=22335 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189530260.823:313): user pid=22335 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189530262.189:314): user pid=22336 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189530262.189:315): user pid=22336 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1189530265.717:316): avc:  denied  { sendto } for  pid=22338 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530265.717:317): avc:  denied  { sendto } for  pid=22345 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530265.717:316): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530265.717:317): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530265.717:318): avc:  denied  { sendto } for  pid=22342 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530265.717:318): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530265.717:319): avc:  denied  { sendto } for  pid=22346 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530265.717:319): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530265.718:320): avc:  denied  { sendto } for  pid=22339 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530265.718:320): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530265.718:321): avc:  denied  { sendto } for  pid=22341 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530265.718:322): avc:  denied  { sendto } for  pid=22343 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530265.718:321): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530265.718:322): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530265.718:323): avc:  denied  { sendto } for  pid=22340 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530265.718:324): avc:  denied  { sendto } for  pid=22347 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530265.718:323): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530265.718:324): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530265.718:325): avc:  denied  { sendto } for  pid=22344 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530265.718:325): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1189530274.855:326): user pid=5492 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189530274.855:327): user pid=5492 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189530277.127:328): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2585 comm="dhcdbd" sig=6
>type=AVC msg=audit(1189530277.830:329): avc:  denied  { sendto } for  pid=22420 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530277.830:330): avc:  denied  { sendto } for  pid=22421 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530277.830:329): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530277.830:330): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530278.753:331): avc:  denied  { sendto } for  pid=22428 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530278.753:331): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8a items=0 ppid=599 pid=22428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.585:332): avc:  denied  { sendto } for  pid=22440 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530281.585:333): avc:  denied  { sendto } for  pid=22439 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.585:332): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530281.585:333): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.588:334): avc:  denied  { sendto } for  pid=22451 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.588:334): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.590:335): avc:  denied  { sendto } for  pid=22450 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.590:335): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.593:336): avc:  denied  { sendto } for  pid=22452 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.593:336): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.594:337): avc:  denied  { sendto } for  pid=22456 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.594:337): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.596:338): avc:  denied  { sendto } for  pid=22455 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.596:338): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.597:339): avc:  denied  { sendto } for  pid=22458 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.597:339): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.600:340): avc:  denied  { sendto } for  pid=22457 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.600:340): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.601:341): avc:  denied  { sendto } for  pid=22460 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.601:341): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.602:342): avc:  denied  { sendto } for  pid=22459 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.602:342): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.603:343): avc:  denied  { sendto } for  pid=22462 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.603:343): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.605:344): avc:  denied  { sendto } for  pid=22461 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.605:344): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.607:345): avc:  denied  { sendto } for  pid=22464 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.607:345): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.608:346): avc:  denied  { sendto } for  pid=22463 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.608:346): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.609:347): avc:  denied  { sendto } for  pid=22465 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.609:347): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.707:348): avc:  denied  { sendto } for  pid=22471 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.707:348): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.708:349): avc:  denied  { sendto } for  pid=22474 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.708:349): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.709:350): avc:  denied  { sendto } for  pid=22470 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.709:350): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.709:351): avc:  denied  { sendto } for  pid=22475 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.709:351): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.714:352): avc:  denied  { sendto } for  pid=22480 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.714:352): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.715:353): avc:  denied  { sendto } for  pid=22481 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.715:353): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189530281.805:354): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=AVC msg=audit(1189530281.815:355): avc:  denied  { sendto } for  pid=22494 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.815:355): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.817:356): avc:  denied  { sendto } for  pid=22496 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.817:356): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.820:357): avc:  denied  { sendto } for  pid=22495 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.820:357): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.820:358): avc:  denied  { sendto } for  pid=22498 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.820:358): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.822:359): avc:  denied  { sendto } for  pid=22497 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.822:359): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.822:360): avc:  denied  { sendto } for  pid=22499 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.822:360): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.823:361): avc:  denied  { sendto } for  pid=22500 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.823:361): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.823:362): avc:  denied  { sendto } for  pid=22501 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.823:362): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.825:363): avc:  denied  { sendto } for  pid=22502 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.825:363): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530281.826:364): avc:  denied  { sendto } for  pid=22503 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530281.826:364): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.007:365): avc:  denied  { sendto } for  pid=22488 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.007:365): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8d items=0 ppid=599 pid=22488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.332:366): avc:  denied  { sendto } for  pid=22533 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.332:366): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=90 items=0 ppid=599 pid=22533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.916:367): avc:  denied  { sendto } for  pid=22552 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.916:367): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.917:368): avc:  denied  { sendto } for  pid=22553 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.917:368): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.919:369): avc:  denied  { sendto } for  pid=22558 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.919:369): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.921:370): avc:  denied  { sendto } for  pid=22556 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.921:370): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.929:371): avc:  denied  { sendto } for  pid=22563 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.929:371): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.930:372): avc:  denied  { sendto } for  pid=22562 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530282.930:373): avc:  denied  { sendto } for  pid=22565 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.930:373): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530282.930:372): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.930:374): avc:  denied  { sendto } for  pid=22567 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.930:374): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.932:375): avc:  denied  { sendto } for  pid=22566 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.932:375): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.933:376): avc:  denied  { sendto } for  pid=22569 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.933:376): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.933:377): avc:  denied  { sendto } for  pid=22568 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.933:377): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.933:378): avc:  denied  { sendto } for  pid=22570 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.933:378): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.938:379): avc:  denied  { sendto } for  pid=22572 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.938:379): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530282.939:380): avc:  denied  { sendto } for  pid=22574 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530282.939:380): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.040:381): avc:  denied  { sendto } for  pid=22580 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.040:381): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.041:382): avc:  denied  { sendto } for  pid=22581 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.041:382): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.110:383): avc:  denied  { sendto } for  pid=22587 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.110:383): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.110:384): avc:  denied  { sendto } for  pid=22586 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.110:384): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.113:385): avc:  denied  { sendto } for  pid=22591 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.113:385): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.114:386): avc:  denied  { sendto } for  pid=22590 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.114:386): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.128:387): avc:  denied  { sendto } for  pid=22596 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.128:387): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.129:388): avc:  denied  { sendto } for  pid=22601 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.129:388): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.131:389): avc:  denied  { sendto } for  pid=22597 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.131:389): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.131:390): avc:  denied  { sendto } for  pid=22603 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.131:390): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.133:391): avc:  denied  { sendto } for  pid=22602 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.133:391): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.134:392): avc:  denied  { sendto } for  pid=22604 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.134:392): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.135:393): avc:  denied  { sendto } for  pid=22606 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.135:393): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.137:394): avc:  denied  { sendto } for  pid=22607 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.137:394): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.138:395): avc:  denied  { sendto } for  pid=22608 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.138:395): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.235:396): avc:  denied  { sendto } for  pid=22610 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.235:396): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.241:397): avc:  denied  { sendto } for  pid=22611 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.241:397): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.243:398): avc:  denied  { sendto } for  pid=22612 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.243:398): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.339:399): avc:  denied  { sendto } for  pid=22617 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.339:399): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.340:400): avc:  denied  { sendto } for  pid=22621 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.340:400): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.341:401): avc:  denied  { sendto } for  pid=22618 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.341:401): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.341:402): avc:  denied  { sendto } for  pid=22624 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.341:402): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.348:403): avc:  denied  { sendto } for  pid=22627 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.348:403): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.349:404): avc:  denied  { sendto } for  pid=22632 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.349:404): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.353:405): avc:  denied  { sendto } for  pid=22628 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.353:405): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.356:406): avc:  denied  { sendto } for  pid=22634 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.356:406): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.358:407): avc:  denied  { sendto } for  pid=22633 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.358:407): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.360:408): avc:  denied  { sendto } for  pid=22635 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.360:408): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.361:409): avc:  denied  { sendto } for  pid=22637 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.361:409): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.365:410): avc:  denied  { sendto } for  pid=22638 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.365:410): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.366:411): avc:  denied  { sendto } for  pid=22639 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.366:411): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.461:412): avc:  denied  { sendto } for  pid=22643 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.461:412): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.466:413): avc:  denied  { sendto } for  pid=22644 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.466:413): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.468:414): avc:  denied  { sendto } for  pid=22645 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.468:414): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.511:415): avc:  denied  { sendto } for  pid=22647 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.511:415): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.513:416): avc:  denied  { sendto } for  pid=22648 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.513:416): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.517:417): avc:  denied  { sendto } for  pid=22650 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.517:417): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.523:418): avc:  denied  { sendto } for  pid=22652 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.523:418): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.619:419): avc:  denied  { sendto } for  pid=22664 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.619:419): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.625:420): avc:  denied  { sendto } for  pid=22666 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.625:420): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.626:421): avc:  denied  { sendto } for  pid=22667 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.626:421): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.627:422): avc:  denied  { sendto } for  pid=22668 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.627:422): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.632:423): avc:  denied  { sendto } for  pid=22669 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.632:423): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.633:424): avc:  denied  { sendto } for  pid=22670 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.633:424): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.634:425): avc:  denied  { sendto } for  pid=22671 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.634:425): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.635:426): avc:  denied  { sendto } for  pid=22672 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.635:426): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.639:427): avc:  denied  { sendto } for  pid=22673 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.639:427): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.640:428): avc:  denied  { sendto } for  pid=22674 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.640:428): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.642:429): avc:  denied  { sendto } for  pid=22677 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.642:429): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.643:430): avc:  denied  { sendto } for  pid=22676 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.643:430): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.647:431): avc:  denied  { sendto } for  pid=22678 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.647:431): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530283.648:432): avc:  denied  { sendto } for  pid=22679 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530283.648:432): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.769:433): avc:  denied  { sendto } for  pid=22685 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.769:433): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.769:434): avc:  denied  { sendto } for  pid=22686 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.769:434): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.770:435): avc:  denied  { sendto } for  pid=22688 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.770:435): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.770:436): avc:  denied  { sendto } for  pid=22687 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.770:436): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.781:437): avc:  denied  { sendto } for  pid=22696 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.781:437): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.782:438): avc:  denied  { sendto } for  pid=22695 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.782:438): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.783:439): avc:  denied  { sendto } for  pid=22701 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.783:439): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.785:440): avc:  denied  { sendto } for  pid=22700 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.785:440): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.786:441): avc:  denied  { sendto } for  pid=22702 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.786:441): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.788:442): avc:  denied  { sendto } for  pid=22703 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.788:442): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.789:443): avc:  denied  { sendto } for  pid=22705 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.789:443): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.791:444): avc:  denied  { sendto } for  pid=22706 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.791:444): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.792:445): avc:  denied  { sendto } for  pid=22707 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.792:445): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.888:446): avc:  denied  { sendto } for  pid=22709 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.888:446): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.894:447): avc:  denied  { sendto } for  pid=22710 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.894:447): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530284.896:448): avc:  denied  { sendto } for  pid=22711 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530284.896:448): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.230:449): avc:  denied  { sendto } for  pid=22771 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.230:449): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.232:450): avc:  denied  { sendto } for  pid=22775 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.232:450): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.235:451): avc:  denied  { sendto } for  pid=22772 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.235:451): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.237:452): avc:  denied  { sendto } for  pid=22778 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.237:452): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.267:453): avc:  denied  { sendto } for  pid=22781 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.267:453): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.269:454): avc:  denied  { sendto } for  pid=22782 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.269:454): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.270:455): avc:  denied  { sendto } for  pid=22785 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530285.271:456): avc:  denied  { sendto } for  pid=22784 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.271:456): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530285.270:455): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.277:457): avc:  denied  { sendto } for  pid=22786 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.277:457): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.278:458): avc:  denied  { sendto } for  pid=22787 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.278:458): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.280:459): avc:  denied  { sendto } for  pid=22788 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.280:459): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.280:460): avc:  denied  { sendto } for  pid=22789 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.280:460): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.444:461): avc:  denied  { sendto } for  pid=22795 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.444:461): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.445:462): avc:  denied  { sendto } for  pid=22796 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.445:462): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.448:463): avc:  denied  { sendto } for  pid=22800 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.448:463): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.449:464): avc:  denied  { sendto } for  pid=22799 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.449:464): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.464:465): avc:  denied  { sendto } for  pid=22806 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.464:465): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.466:466): avc:  denied  { sendto } for  pid=22805 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.466:466): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.466:467): avc:  denied  { sendto } for  pid=22810 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.466:467): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.467:468): avc:  denied  { sendto } for  pid=22811 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.467:468): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.470:469): avc:  denied  { sendto } for  pid=22813 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.470:469): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.471:470): avc:  denied  { sendto } for  pid=22812 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.471:470): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.573:471): avc:  denied  { sendto } for  pid=22821 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.573:471): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.573:472): avc:  denied  { sendto } for  pid=22822 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.573:472): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.578:473): avc:  denied  { sendto } for  pid=22823 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.578:473): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.580:474): avc:  denied  { sendto } for  pid=22825 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.580:474): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.582:475): avc:  denied  { sendto } for  pid=22824 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.582:475): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530285.583:476): avc:  denied  { sendto } for  pid=22826 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530285.583:476): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.642:477): avc:  denied  { sendto } for  pid=22834 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.642:477): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.643:478): avc:  denied  { sendto } for  pid=22833 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.643:478): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.645:479): avc:  denied  { sendto } for  pid=22837 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.645:479): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.646:480): avc:  denied  { sendto } for  pid=22839 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.646:480): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.653:481): avc:  denied  { sendto } for  pid=22843 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530286.653:482): avc:  denied  { sendto } for  pid=22844 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.653:481): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530286.653:482): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.654:483): avc:  denied  { sendto } for  pid=22848 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.654:483): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.655:484): avc:  denied  { sendto } for  pid=22849 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.655:484): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.657:485): avc:  denied  { sendto } for  pid=22850 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.657:485): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.657:486): avc:  denied  { sendto } for  pid=22851 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.657:486): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.760:487): avc:  denied  { sendto } for  pid=22861 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.760:487): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.761:488): avc:  denied  { sendto } for  pid=22860 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.761:488): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.767:489): avc:  denied  { sendto } for  pid=22863 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530286.767:490): avc:  denied  { sendto } for  pid=22862 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.767:490): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530286.767:489): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.770:491): avc:  denied  { sendto } for  pid=22865 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.770:491): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.771:492): avc:  denied  { sendto } for  pid=22864 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.771:492): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.812:493): avc:  denied  { sendto } for  pid=22869 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.812:493): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.812:494): avc:  denied  { sendto } for  pid=22868 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.812:494): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.815:495): avc:  denied  { sendto } for  pid=22873 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.815:495): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.816:496): avc:  denied  { sendto } for  pid=22872 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.816:496): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.827:497): avc:  denied  { sendto } for  pid=22879 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.827:497): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.828:498): avc:  denied  { sendto } for  pid=22881 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.828:498): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.830:499): avc:  denied  { sendto } for  pid=22878 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.830:499): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.830:500): avc:  denied  { sendto } for  pid=22885 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.830:500): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.833:501): avc:  denied  { sendto } for  pid=22882 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.833:501): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.834:502): avc:  denied  { sendto } for  pid=22887 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.834:502): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.835:503): avc:  denied  { sendto } for  pid=22886 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.835:503): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.836:504): avc:  denied  { sendto } for  pid=22888 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.836:504): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.938:505): avc:  denied  { sendto } for  pid=22893 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.938:505): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.938:506): avc:  denied  { sendto } for  pid=22894 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.938:506): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.943:507): avc:  denied  { sendto } for  pid=22895 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.943:507): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530286.945:508): avc:  denied  { sendto } for  pid=22896 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530286.945:508): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.064:509): avc:  denied  { sendto } for  pid=22901 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.064:509): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.065:510): avc:  denied  { sendto } for  pid=22902 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.065:510): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.066:511): avc:  denied  { sendto } for  pid=22905 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.066:511): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.067:512): avc:  denied  { sendto } for  pid=22906 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.067:512): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.073:513): avc:  denied  { sendto } for  pid=22912 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.073:513): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.073:514): avc:  denied  { sendto } for  pid=22911 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.073:514): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.074:515): avc:  denied  { sendto } for  pid=22914 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.074:515): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.074:516): avc:  denied  { sendto } for  pid=22915 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.074:516): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.078:517): avc:  denied  { sendto } for  pid=22918 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.078:517): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.079:518): avc:  denied  { sendto } for  pid=22916 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.079:518): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.181:519): avc:  denied  { sendto } for  pid=22924 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.181:519): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.182:520): avc:  denied  { sendto } for  pid=22925 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.182:520): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.186:521): avc:  denied  { sendto } for  pid=22926 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.186:521): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.186:522): avc:  denied  { sendto } for  pid=22927 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.186:522): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.187:523): avc:  denied  { sendto } for  pid=22928 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.187:523): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.188:524): avc:  denied  { sendto } for  pid=22929 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.188:524): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.245:525): avc:  denied  { sendto } for  pid=22934 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530287.246:526): avc:  denied  { sendto } for  pid=22935 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.246:526): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.248:527): avc:  denied  { sendto } for  pid=22938 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.248:527): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530287.245:525): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.250:528): avc:  denied  { sendto } for  pid=22941 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.250:528): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.260:529): avc:  denied  { sendto } for  pid=22945 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.260:529): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.262:530): avc:  denied  { sendto } for  pid=22947 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.262:530): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.266:531): avc:  denied  { sendto } for  pid=22944 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.266:531): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.266:532): avc:  denied  { sendto } for  pid=22948 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.266:532): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.267:533): avc:  denied  { sendto } for  pid=22949 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.267:533): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.268:534): avc:  denied  { sendto } for  pid=22951 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.268:534): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.272:535): avc:  denied  { sendto } for  pid=22952 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.272:535): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.273:536): avc:  denied  { sendto } for  pid=22954 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.273:536): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.375:537): avc:  denied  { sendto } for  pid=22960 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.375:537): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.375:538): avc:  denied  { sendto } for  pid=22961 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.375:538): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.380:539): avc:  denied  { sendto } for  pid=22962 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.380:539): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.382:540): avc:  denied  { sendto } for  pid=22963 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.382:540): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.466:541): avc:  denied  { sendto } for  pid=22968 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.466:541): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.471:542): avc:  denied  { sendto } for  pid=22973 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.471:542): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.473:543): avc:  denied  { sendto } for  pid=22969 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.473:543): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.475:544): avc:  denied  { sendto } for  pid=22974 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.475:544): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.486:545): avc:  denied  { sendto } for  pid=22979 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.486:545): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.488:546): avc:  denied  { sendto } for  pid=22980 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.488:546): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.490:547): avc:  denied  { sendto } for  pid=22986 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.490:547): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.490:548): avc:  denied  { sendto } for  pid=22985 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.490:548): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.494:549): avc:  denied  { sendto } for  pid=22987 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.494:549): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.494:550): avc:  denied  { sendto } for  pid=22988 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.494:550): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.596:551): avc:  denied  { sendto } for  pid=22999 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.596:551): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.596:552): avc:  denied  { sendto } for  pid=23000 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.596:552): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.602:553): avc:  denied  { sendto } for  pid=23001 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.602:553): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.603:554): avc:  denied  { sendto } for  pid=23002 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.603:554): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.604:555): avc:  denied  { sendto } for  pid=23003 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.604:555): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530287.605:556): avc:  denied  { sendto } for  pid=23004 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530287.605:556): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.696:557): avc:  denied  { sendto } for  pid=23018 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530290.696:558): avc:  denied  { sendto } for  pid=23017 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.696:557): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530290.696:558): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.699:559): avc:  denied  { sendto } for  pid=23021 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.699:559): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.700:560): avc:  denied  { sendto } for  pid=23022 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.700:560): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.710:561): avc:  denied  { sendto } for  pid=23027 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.710:561): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.712:562): avc:  denied  { sendto } for  pid=23032 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.712:562): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.712:563): avc:  denied  { sendto } for  pid=23028 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.712:563): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.714:564): avc:  denied  { sendto } for  pid=23034 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.714:564): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.716:565): avc:  denied  { sendto } for  pid=23033 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.716:565): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.717:566): avc:  denied  { sendto } for  pid=23035 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.717:566): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.718:567): avc:  denied  { sendto } for  pid=23037 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.718:567): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.720:568): avc:  denied  { sendto } for  pid=23038 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.720:568): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.721:569): avc:  denied  { sendto } for  pid=23039 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.721:569): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.818:570): avc:  denied  { sendto } for  pid=23045 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.818:570): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.823:571): avc:  denied  { sendto } for  pid=23046 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.823:571): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.825:572): avc:  denied  { sendto } for  pid=23047 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530290.825:572): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530290.833:573): avc:  denied  { read write } for  pid=23048 comm="modprobe" name="" dev=sockfs ino=1188537 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189530290.833:573): avc:  denied  { read write } for  pid=23048 comm="modprobe" name="" dev=sockfs ino=1188559 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189530290.833:573): arch=40000003 syscall=11 success=yes exit=0 a0=915f530 a1=bf9ab6e8 a2=bf9adfc0 a3=915f530 items=0 ppid=23044 pid=23048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189530290.833:573):  path="socket:[1188559]"
>type=AVC_PATH msg=audit(1189530290.833:573):  path="socket:[1188537]"
>type=AVC msg=audit(1189530291.199:574): avc:  denied  { sendto } for  pid=23080 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.199:574): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=81 items=0 ppid=599 pid=23080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.237:575): avc:  denied  { sendto } for  pid=23091 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.237:575): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=7b items=0 ppid=599 pid=23091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.238:576): avc:  denied  { sendto } for  pid=23096 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.238:576): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=77 items=0 ppid=599 pid=23096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.306:577): avc:  denied  { sendto } for  pid=23118 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.306:577): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=79 items=0 ppid=599 pid=23118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.434:578): avc:  denied  { sendto } for  pid=23153 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.434:578): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=73 items=0 ppid=599 pid=23153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.464:579): avc:  denied  { sendto } for  pid=23164 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.464:579): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=75 items=0 ppid=599 pid=23164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.487:580): avc:  denied  { sendto } for  pid=23175 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.487:580): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=7d items=0 ppid=599 pid=23175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.497:581): avc:  denied  { sendto } for  pid=23188 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.497:581): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=81 items=0 ppid=599 pid=23188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.503:582): avc:  denied  { sendto } for  pid=23191 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.503:582): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=71 items=0 ppid=599 pid=23191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.536:583): avc:  denied  { sendto } for  pid=23208 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.536:583): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=93 items=0 ppid=599 pid=23208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.589:584): avc:  denied  { sendto } for  pid=23221 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.589:584): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=87 items=0 ppid=599 pid=23221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.601:585): avc:  denied  { sendto } for  pid=23222 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.601:585): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=6f items=0 ppid=599 pid=23222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.617:586): avc:  denied  { sendto } for  pid=23225 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.617:586): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=6f items=0 ppid=599 pid=23225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.618:587): avc:  denied  { sendto } for  pid=23230 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.618:587): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=6f items=0 ppid=599 pid=23230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.619:588): avc:  denied  { sendto } for  pid=23232 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.619:588): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=7d items=0 ppid=599 pid=23232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.620:589): avc:  denied  { sendto } for  pid=23233 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.620:589): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=77 items=0 ppid=599 pid=23233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.721:590): avc:  denied  { sendto } for  pid=23238 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.721:590): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.721:591): avc:  denied  { sendto } for  pid=23239 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.721:591): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.723:592): avc:  denied  { sendto } for  pid=23242 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.723:592): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.725:593): avc:  denied  { sendto } for  pid=23243 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.725:593): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.732:594): avc:  denied  { sendto } for  pid=23249 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.732:594): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.733:595): avc:  denied  { sendto } for  pid=23252 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.733:595): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.734:596): avc:  denied  { sendto } for  pid=23248 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.734:596): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.735:597): avc:  denied  { sendto } for  pid=23255 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.735:597): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.736:598): avc:  denied  { sendto } for  pid=23254 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.736:598): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.737:599): avc:  denied  { sendto } for  pid=23256 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.737:599): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.839:600): avc:  denied  { sendto } for  pid=23271 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.839:600): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.840:601): avc:  denied  { sendto } for  pid=23272 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.840:601): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.848:602): avc:  denied  { sendto } for  pid=23273 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.848:602): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.850:603): avc:  denied  { sendto } for  pid=23275 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.850:603): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.852:604): avc:  denied  { sendto } for  pid=23281 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.852:604): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.854:605): avc:  denied  { sendto } for  pid=23282 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.854:605): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.885:606): avc:  denied  { sendto } for  pid=23296 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.885:606): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=83 items=0 ppid=599 pid=23296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.886:607): avc:  denied  { sendto } for  pid=23299 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.886:607): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=79 items=0 ppid=599 pid=23299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.929:608): avc:  denied  { sendto } for  pid=23320 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.929:608): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=7b items=0 ppid=599 pid=23320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.941:609): avc:  denied  { sendto } for  pid=23337 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.941:609): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=75 items=0 ppid=599 pid=23337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.941:610): avc:  denied  { sendto } for  pid=23335 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.941:610): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=77 items=0 ppid=599 pid=23335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.985:611): avc:  denied  { sendto } for  pid=23347 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.985:611): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.987:612): avc:  denied  { sendto } for  pid=23350 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.987:612): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.988:613): avc:  denied  { sendto } for  pid=23346 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.988:613): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530291.989:614): avc:  denied  { sendto } for  pid=23353 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530291.989:614): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.003:615): avc:  denied  { sendto } for  pid=23357 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.003:615): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.004:616): avc:  denied  { sendto } for  pid=23356 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.004:616): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.006:617): avc:  denied  { sendto } for  pid=23362 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.006:617): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.009:618): avc:  denied  { sendto } for  pid=23361 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.009:618): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.011:619): avc:  denied  { sendto } for  pid=23363 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.011:619): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.012:620): avc:  denied  { sendto } for  pid=23364 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.012:620): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.012:621): avc:  denied  { sendto } for  pid=23366 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.012:621): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.015:622): avc:  denied  { sendto } for  pid=23367 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.015:622): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.015:623): avc:  denied  { sendto } for  pid=23368 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.015:623): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.113:624): avc:  denied  { sendto } for  pid=23370 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.113:624): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.118:625): avc:  denied  { sendto } for  pid=23371 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.118:625): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.120:626): avc:  denied  { sendto } for  pid=23372 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.120:626): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.170:627): avc:  denied  { sendto } for  pid=23377 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.170:627): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.170:628): avc:  denied  { sendto } for  pid=23378 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.170:628): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.172:629): avc:  denied  { sendto } for  pid=23381 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.172:629): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.172:630): avc:  denied  { sendto } for  pid=23382 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.172:630): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.189:631): avc:  denied  { sendto } for  pid=23388 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.189:631): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.189:632): avc:  denied  { sendto } for  pid=23387 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.189:632): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.190:633): avc:  denied  { sendto } for  pid=23392 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.190:633): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.191:634): avc:  denied  { sendto } for  pid=23393 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.191:634): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.195:635): avc:  denied  { sendto } for  pid=23394 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.195:635): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.195:636): avc:  denied  { sendto } for  pid=23395 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.195:636): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.297:637): avc:  denied  { sendto } for  pid=23423 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.297:637): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.297:638): avc:  denied  { sendto } for  pid=23422 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.297:638): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.299:639): avc:  denied  { sendto } for  pid=23424 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.299:639): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.300:640): avc:  denied  { sendto } for  pid=23425 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.300:640): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.301:641): avc:  denied  { sendto } for  pid=23427 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.301:641): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.301:642): avc:  denied  { sendto } for  pid=23426 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.301:642): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.303:643): avc:  denied  { sendto } for  pid=23428 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.303:643): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.303:644): avc:  denied  { sendto } for  pid=23429 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.303:644): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.304:645): avc:  denied  { sendto } for  pid=23430 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.304:645): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.304:646): avc:  denied  { sendto } for  pid=23431 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.304:646): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.306:647): avc:  denied  { sendto } for  pid=23432 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530292.306:648): avc:  denied  { sendto } for  pid=23433 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.306:647): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530292.306:648): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.307:649): avc:  denied  { sendto } for  pid=23434 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.307:649): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.307:650): avc:  denied  { sendto } for  pid=23435 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.307:650): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.309:651): avc:  denied  { sendto } for  pid=23437 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.309:651): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.310:652): avc:  denied  { sendto } for  pid=23439 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.310:652): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.310:653): avc:  denied  { sendto } for  pid=23438 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.310:653): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.311:654): avc:  denied  { sendto } for  pid=23441 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.311:654): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.312:655): avc:  denied  { sendto } for  pid=23440 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.312:655): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.313:656): avc:  denied  { sendto } for  pid=23443 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.313:656): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.313:657): avc:  denied  { sendto } for  pid=23442 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.313:657): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.314:658): avc:  denied  { sendto } for  pid=23444 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.314:658): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.708:659): avc:  denied  { sendto } for  pid=23450 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.708:659): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.709:660): avc:  denied  { sendto } for  pid=23453 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.709:660): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.710:661): avc:  denied  { sendto } for  pid=23449 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.710:661): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.710:662): avc:  denied  { sendto } for  pid=23454 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.710:662): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.718:663): avc:  denied  { sendto } for  pid=23460 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.718:663): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.719:664): avc:  denied  { sendto } for  pid=23464 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.719:664): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.721:665): avc:  denied  { sendto } for  pid=23459 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.721:665): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.721:666): avc:  denied  { sendto } for  pid=23466 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.721:666): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.723:667): avc:  denied  { sendto } for  pid=23465 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.723:667): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.725:668): avc:  denied  { sendto } for  pid=23467 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.725:668): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.826:669): avc:  denied  { sendto } for  pid=23484 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.826:669): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.827:670): avc:  denied  { sendto } for  pid=23485 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.827:670): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.832:671): avc:  denied  { sendto } for  pid=23487 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1189530292.832:672): avc:  denied  { sendto } for  pid=23486 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.832:671): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1189530292.832:672): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.834:673): avc:  denied  { sendto } for  pid=23488 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.834:673): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530292.835:674): avc:  denied  { sendto } for  pid=23489 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530292.835:674): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530293.978:675): avc:  denied  { sendto } for  pid=23496 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530293.978:675): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530293.979:676): avc:  denied  { sendto } for  pid=23495 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530293.979:676): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530293.981:677): avc:  denied  { sendto } for  pid=23499 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530293.981:677): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530293.983:678): avc:  denied  { sendto } for  pid=23500 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530293.983:678): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530293.989:679): avc:  denied  { sendto } for  pid=23505 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530293.989:679): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530293.991:680): avc:  denied  { sendto } for  pid=23506 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530293.991:680): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.093:681): avc:  denied  { sendto } for  pid=23517 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.093:681): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.094:682): avc:  denied  { sendto } for  pid=23518 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.094:682): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.097:683): avc:  denied  { sendto } for  pid=23519 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.097:683): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.098:684): avc:  denied  { sendto } for  pid=23520 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.098:684): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.100:685): avc:  denied  { sendto } for  pid=23521 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.100:685): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.100:686): avc:  denied  { sendto } for  pid=23522 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.100:686): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.104:687): avc:  denied  { sendto } for  pid=23523 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.104:687): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.105:688): avc:  denied  { sendto } for  pid=23524 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.105:688): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.106:689): avc:  denied  { sendto } for  pid=23525 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.106:689): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.106:690): avc:  denied  { sendto } for  pid=23526 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.106:690): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.190:691): avc:  denied  { sendto } for  pid=23531 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.190:691): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.191:692): avc:  denied  { sendto } for  pid=23532 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.191:692): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.193:693): avc:  denied  { sendto } for  pid=23535 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.193:693): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.195:694): avc:  denied  { sendto } for  pid=23537 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.195:694): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.204:695): avc:  denied  { sendto } for  pid=23541 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.204:695): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.207:696): avc:  denied  { sendto } for  pid=23543 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.207:696): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.308:697): avc:  denied  { sendto } for  pid=23557 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.308:697): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.313:698): avc:  denied  { sendto } for  pid=23560 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.313:698): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.314:699): avc:  denied  { sendto } for  pid=23559 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.314:699): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.316:700): avc:  denied  { sendto } for  pid=23562 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.316:700): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.318:701): avc:  denied  { sendto } for  pid=23561 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.318:701): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.320:702): avc:  denied  { sendto } for  pid=23564 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.320:702): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.321:703): avc:  denied  { sendto } for  pid=23563 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.321:703): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.323:704): avc:  denied  { sendto } for  pid=23566 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.323:704): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.325:705): avc:  denied  { sendto } for  pid=23565 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.325:705): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530294.326:706): avc:  denied  { sendto } for  pid=23567 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530294.326:706): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1189530295.547:707): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1986 comm="named" sig=6
>type=AVC msg=audit(1189530296.648:708): avc:  denied  { sendto } for  pid=23580 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.648:708): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.649:709): avc:  denied  { sendto } for  pid=23583 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.649:709): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.649:710): avc:  denied  { sendto } for  pid=23579 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.649:710): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.650:711): avc:  denied  { sendto } for  pid=23586 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.650:711): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.656:712): avc:  denied  { sendto } for  pid=23589 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.656:712): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.657:713): avc:  denied  { sendto } for  pid=23594 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.657:713): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.659:714): avc:  denied  { sendto } for  pid=23590 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.659:714): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.659:715): avc:  denied  { sendto } for  pid=23596 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.659:715): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.661:716): avc:  denied  { sendto } for  pid=23595 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.661:716): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.662:717): avc:  denied  { sendto } for  pid=23597 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.662:717): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.663:718): avc:  denied  { sendto } for  pid=23599 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.663:718): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.665:719): avc:  denied  { sendto } for  pid=23600 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.665:719): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.666:720): avc:  denied  { sendto } for  pid=23601 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.666:720): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.764:721): avc:  denied  { sendto } for  pid=23604 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.764:721): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.770:722): avc:  denied  { sendto } for  pid=23605 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.770:722): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530296.772:723): avc:  denied  { sendto } for  pid=23606 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530296.772:723): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.832:724): avc:  denied  { sendto } for  pid=23613 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.832:724): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.835:725): avc:  denied  { sendto } for  pid=23614 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.835:725): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.840:726): avc:  denied  { sendto } for  pid=23612 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.840:726): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.843:727): avc:  denied  { sendto } for  pid=23619 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.843:727): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.848:728): avc:  denied  { sendto } for  pid=23620 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.848:728): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.849:729): avc:  denied  { sendto } for  pid=23622 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.849:729): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.849:730): avc:  denied  { sendto } for  pid=23625 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.849:730): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.851:731): avc:  denied  { sendto } for  pid=23627 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.851:731): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.853:732): avc:  denied  { sendto } for  pid=23626 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.853:732): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.854:733): avc:  denied  { sendto } for  pid=23628 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.854:733): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.956:734): avc:  denied  { sendto } for  pid=23643 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.956:734): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.956:735): avc:  denied  { sendto } for  pid=23644 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.956:735): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.965:736): avc:  denied  { sendto } for  pid=23645 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.965:736): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.966:737): avc:  denied  { sendto } for  pid=23646 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.966:737): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.968:738): avc:  denied  { sendto } for  pid=23648 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.968:738): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.968:739): avc:  denied  { sendto } for  pid=23649 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.968:739): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.970:740): avc:  denied  { sendto } for  pid=23650 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.970:740): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.970:741): avc:  denied  { sendto } for  pid=23651 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.970:741): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.971:742): avc:  denied  { sendto } for  pid=23652 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.971:742): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.971:743): avc:  denied  { sendto } for  pid=23653 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.971:743): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.973:744): avc:  denied  { sendto } for  pid=23654 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.973:744): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.973:745): avc:  denied  { sendto } for  pid=23655 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.973:745): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.974:746): avc:  denied  { sendto } for  pid=23656 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.974:746): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.974:747): avc:  denied  { sendto } for  pid=23657 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.974:747): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.975:748): avc:  denied  { sendto } for  pid=23658 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.975:748): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.976:749): avc:  denied  { sendto } for  pid=23659 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.976:749): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.976:750): avc:  denied  { sendto } for  pid=23660 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.976:750): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530297.977:751): avc:  denied  { sendto } for  pid=23661 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530297.977:751): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530298.025:752): avc:  denied  { sendto } for  pid=23667 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530298.025:752): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530298.026:753): avc:  denied  { sendto } for  pid=23668 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530298.026:753): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530298.027:754): avc:  denied  { sendto } for  pid=23672 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530298.027:754): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530298.028:755): avc:  denied  { sendto } for  pid=23671 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530298.028:755): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530298.032:756): avc:  denied  { sendto } for  pid=23678 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530298.032:756): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530298.033:757): avc:  denied  { sendto } for  pid=23681 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530298.033:757): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530298.034:758): avc:  denied  { sendto } for  pid=23677 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530298.034:758): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530298.034:759): avc:  denied  { sendto } for  pid=23683 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530298.034:759): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530298.037:760): avc:  denied  { sendto } for  pid=23682 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530298.037:760): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530298.037:761): avc:  denied  { sendto } for  pid=23686 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530298.037:761): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530298.038:762): avc:  denied  { sendto } for  pid=23685 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530298.038:762): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1189530298.041:763): avc:  denied  { sendto } for  pid=23688 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1189530298.041:763): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1189530298.129:7793): auditd normal halt, sending auid=4294967295 pid=23666 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1905
>type=DAEMON_START msg=audit(1189530463.736:6981): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1911 res=success, auditd pid=1911
>type=CONFIG_CHANGE msg=audit(1189530463.843:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189530463.843:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189530463.884:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189530463.884:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189530471.297:9): avc:  denied  { write } for  pid=2026 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189530471.297:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfdee400 a2=63a494 a3=0 items=0 ppid=1 pid=2026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1189530471.498:10): avc:  denied  { read write } for  pid=2229 comm="modprobe" name="" dev=sockfs ino=9252 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189530471.498:10): avc:  denied  { read write } for  pid=2229 comm="modprobe" name="" dev=sockfs ino=9262 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189530471.498:10): arch=40000003 syscall=11 success=yes exit=0 a0=98bb710 a1=bfb144d8 a2=bfb17910 a3=98bb710 items=0 ppid=2187 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189530471.498:10):  path="socket:[9262]"
>type=AVC_PATH msg=audit(1189530471.498:10):  path="socket:[9252]"
>type=AVC msg=audit(1189530480.843:11): avc:  denied  { getattr } for  pid=2694 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=system_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189530480.843:11): arch=40000003 syscall=195 success=no exit=-13 a0=bfdc3ea8 a1=bfdc2d94 a2=816ff4 a3=d items=0 ppid=2693 pid=2694 auid=4294967295 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=system_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189530480.843:11):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189530480.970:12): avc:  denied  { getattr } for  pid=2694 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=system_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189530480.970:12): arch=40000003 syscall=195 success=no exit=-13 a0=8411168 a1=bfdc5c5c a2=816ff4 a3=4 items=0 ppid=2693 pid=2694 auid=4294967295 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=system_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189530480.970:12):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=USER_ERR msg=audit(1189530486.802:13): user pid=2857 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1189530538.410:14): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189530538.414:15): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189530538.415:16): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189530538.419:17): login pid=2965 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189530538.427:18): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189530538.428:19): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189530590.058:20): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2719 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189530752.270:21): user pid=3428 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189530752.271:22): user pid=3428 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189530752.272:23): user pid=3428 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189530752.278:24): user pid=3428 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189530752.278:25): user pid=3428 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189530984.980:26): user pid=4025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189530984.980:27): user pid=4025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1189530988.500:28): user pid=4331 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189544002.751:29): user pid=4799 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1189544007.338:30): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:bluetooth_t:s0 pid=2118 comm="hcid" sig=6
>type=USER_AUTH msg=audit(1189544391.180:31): user pid=5097 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189544391.181:32): user pid=5097 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189544391.351:33): user pid=5097 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1189544426.305:34): user pid=5097 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189544461.649:35): user pid=5146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189546609.079:36): user pid=5425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189546609.079:37): user pid=5425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189546609.114:38): user pid=5425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189546609.120:39): user pid=5425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189546609.120:40): user pid=5425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1189547268.149:41): user pid=10393 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189547268.149:42): user pid=10393 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1189547268.150:43): user pid=10393 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1189547268.153:44): user pid=10393 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1189547268.153:45): user pid=10393 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1189548061.738:46): user pid=10501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189551661.811:47): user pid=10764 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189552678.473:48): user pid=10933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189552678.473:49): user pid=10933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189552678.475:50): user pid=10933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189552678.483:51): user pid=10933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189552678.483:52): user pid=10933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189552684.090:53): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189552684.090:53): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf945a28 a3=6 items=0 ppid=1 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189552692.340:54): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189552777.804:55): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189552777.804:55): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf945a28 a3=6 items=0 ppid=1 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189553088.193:56): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=11042 comm="virt-viewer" sig=11
>type=USER_AUTH msg=audit(1189553383.938:57): user pid=11128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1189553383.938:58): user pid=11128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_ACQ msg=audit(1189553384.008:59): user pid=11128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1189553384.026:60): user pid=11128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1189553384.026:61): user pid=11128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189554315.257:62): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_ACCT msg=audit(1189555261.863:63): user pid=11446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1189558199.499:64): user pid=12313 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189579791.556:65): user pid=12758 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189579833.293:66): user pid=13087 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189579833.293:67): user pid=13087 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189579833.294:68): user pid=13087 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189579833.330:69): user pid=13087 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189579833.331:70): user pid=13087 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189580461.344:71): user pid=14051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1189580566.499:72): user pid=14298 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189580887.721:73): user pid=14620 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189582445.424:74): user pid=14824 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189582445.424:75): user pid=14824 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189582445.455:76): user pid=14824 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189582445.476:77): user pid=14824 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189582445.476:78): user pid=14824 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189582454.196:79): user pid=15137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189582454.198:80): user pid=15137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189582454.198:81): user pid=15137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189582510.962:82): user pid=15143 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189582510.963:83): user pid=15143 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189582510.963:84): user pid=15143 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189584061.743:85): user pid=15329 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189587661.779:86): user pid=15445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1189589497.266:87): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=25568 comm="firefox-bin" sig=6
>type=ANOM_ABEND msg=audit(1189589625.390:88): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=28482 comm="firefox-bin" sig=6
>type=USER_ACCT msg=audit(1189591261.816:89): user pid=28726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_LOGIN msg=audit(1189592929.021:90): user pid=28944 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=matej: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1189592931.686:91): user pid=28944 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1189592931.687:92): user pid=28944 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1189592931.865:93): user pid=28944 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=LOGIN msg=audit(1189592931.866:94): login pid=28944 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189592931.867:95): user pid=28944 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1189592931.868:96): user pid=28946 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1189592931.890:97): user pid=28944 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=/dev/pts/1 res=success)'
>type=USER_AUTH msg=audit(1189592940.464:98): user pid=28977 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189592940.465:99): user pid=28977 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189592940.466:100): user pid=28977 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189592940.473:101): user pid=28977 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189592940.473:102): user pid=28977 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1189592957.093:103): avc:  denied  { write } for  pid=29105 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189592957.093:103): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfc07210 a2=63a494 a3=0 items=0 ppid=1 pid=29105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=DAEMON_START msg=audit(1189593815.848:3366): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1929 res=success, auditd pid=1929
>type=CONFIG_CHANGE msg=audit(1189593815.948:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189593815.948:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189593816.204:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189593816.204:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189593823.185:9): avc:  denied  { write } for  pid=2044 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189593823.185:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8d6ee0 a2=63a494 a3=0 items=0 ppid=1 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1189593823.260:10): avc:  denied  { read write } for  pid=2247 comm="modprobe" name="" dev=sockfs ino=9457 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189593823.260:10): avc:  denied  { read write } for  pid=2247 comm="modprobe" name="" dev=sockfs ino=9473 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189593823.260:10): arch=40000003 syscall=11 success=yes exit=0 a0=9fe4710 a1=bf9fc518 a2=bf9ff950 a3=9fe4710 items=0 ppid=2206 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189593823.260:10):  path="socket:[9473]"
>type=AVC_PATH msg=audit(1189593823.260:10):  path="socket:[9457]"
>type=AVC msg=audit(1189593832.836:11): avc:  denied  { getattr } for  pid=2712 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=system_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189593832.836:11): arch=40000003 syscall=195 success=no exit=-13 a0=bfacc928 a1=bfacb814 a2=816ff4 a3=d items=0 ppid=2711 pid=2712 auid=4294967295 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=system_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189593832.836:11):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189593832.858:12): avc:  denied  { getattr } for  pid=2712 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=system_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189593832.858:12): arch=40000003 syscall=195 success=no exit=-13 a0=9a54168 a1=bface6dc a2=816ff4 a3=4 items=0 ppid=2711 pid=2712 auid=4294967295 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=system_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189593832.858:12):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=USER_ERR msg=audit(1189593837.692:13): user pid=2875 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189593846.849:14): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2753 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189593890.638:15): user pid=2981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189593890.642:16): user pid=2981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189593890.643:17): user pid=2981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189593890.645:18): login pid=2981 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189593890.654:19): user pid=2981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189593890.654:20): user pid=2981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189594861.155:21): user pid=3348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=DAEMON_START msg=audit(1189595145.537:7173): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1929 res=success, auditd pid=1929
>type=CONFIG_CHANGE msg=audit(1189595145.637:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189595145.637:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189595145.807:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189595145.807:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189595152.796:9): avc:  denied  { read write } for  pid=2245 comm="modprobe" name="" dev=sockfs ino=9294 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189595152.796:9): avc:  denied  { read write } for  pid=2245 comm="modprobe" name="" dev=sockfs ino=9308 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189595152.796:9): arch=40000003 syscall=11 success=yes exit=0 a0=9cc1710 a1=bfc57e28 a2=bfc5b260 a3=9cc1710 items=0 ppid=2205 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189595152.796:9):  path="socket:[9308]"
>type=AVC_PATH msg=audit(1189595152.796:9):  path="socket:[9294]"
>type=AVC msg=audit(1189595152.905:10): avc:  denied  { write } for  pid=2044 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189595152.905:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf86f680 a2=63a494 a3=0 items=0 ppid=1 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1189595161.147:11): avc:  denied  { getattr } for  pid=2712 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=system_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189595161.147:11): arch=40000003 syscall=195 success=no exit=-13 a0=bf807f28 a1=bf806e14 a2=816ff4 a3=d items=0 ppid=2711 pid=2712 auid=4294967295 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=system_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189595161.147:11):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=AVC msg=audit(1189595161.192:12): avc:  denied  { getattr } for  pid=2712 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=system_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1189595161.192:12): arch=40000003 syscall=195 success=no exit=-13 a0=8ba3768 a1=bf809cdc a2=816ff4 a3=4 items=0 ppid=2711 pid=2712 auid=4294967295 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=system_u:system_r:hald_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189595161.192:12):  path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi"
>type=USER_ERR msg=audit(1189595167.248:13): user pid=2875 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189595169.910:14): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2762 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189595182.102:15): user pid=2978 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189595182.106:16): user pid=2978 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189595182.107:17): user pid=2978 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189595182.112:18): login pid=2978 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189595182.121:19): user pid=2978 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189595182.121:20): user pid=2978 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189596301.278:21): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3868 comm="ffmpeg" sig=11
>type=ANOM_ABEND msg=audit(1189596344.541:22): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3881 comm="ffmpeg" sig=11
>type=USER_ACCT msg=audit(1189598462.139:23): user pid=4348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189602061.267:24): user pid=5688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1189603513.500:25): user pid=6676 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189616635.846:26): user pid=7117 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189616680.690:27): user pid=7370 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189616680.690:28): user pid=7370 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189616680.732:29): user pid=7370 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189616680.753:30): user pid=7370 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189616680.753:31): user pid=7370 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189616753.392:32): user pid=7995 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189616753.393:33): user pid=7995 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189616753.393:34): user pid=7995 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189620061.453:35): user pid=8780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189620090.048:36): user pid=8784 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189620090.048:37): user pid=8784 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189620090.078:38): user pid=8784 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189620090.081:39): user pid=8784 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189620090.081:40): user pid=8784 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189620109.998:41): user pid=8820 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189620109.999:42): user pid=8820 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189620110.000:43): user pid=8820 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189623535.206:44): user pid=9183 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1189623537.768:45): user pid=9183 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189623537.768:46): user pid=9183 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189623537.768:47): user pid=9183 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189623537.775:48): user pid=9183 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189623537.775:49): user pid=9183 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189623541.139:50): user pid=9216 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189623541.139:51): user pid=9216 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189623541.261:52): user pid=9216 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189623603.012:53): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189623603.012:53): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_ACCT msg=audit(1189623661.693:54): user pid=9276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189624096.318:55): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189624119.941:56): user pid=9326 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189624119.941:57): user pid=9326 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189624120.047:58): user pid=9326 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189624128.421:59): user pid=9326 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189624183.142:60): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189624183.142:60): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_END msg=audit(1189624197.560:61): user pid=9216 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1189624216.807:62): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=9346 comm="qemu-kvm" sig=6
>type=ANOM_PROMISCUOUS msg=audit(1189624216.841:63): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189624248.120:64): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189624248.120:64): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189624249.214:65): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=9395 comm="qemu-kvm" sig=6
>type=ANOM_PROMISCUOUS msg=audit(1189624249.258:66): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189624263.443:67): user pid=9435 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189624263.443:68): user pid=9435 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189624263.448:69): user pid=9435 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189624315.200:70): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189624315.200:70): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189624441.118:71): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189626391.127:72): user pid=10935 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189626391.128:73): user pid=10935 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189626391.166:74): user pid=10935 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189626391.168:75): user pid=10935 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189626391.168:76): user pid=10935 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189626398.368:77): user pid=10941 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189626398.370:78): user pid=10941 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189626398.370:79): user pid=10941 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189626885.042:80): user pid=11325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189626885.042:81): user pid=11325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189626885.043:82): user pid=11325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189626885.044:83): user pid=11325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189626885.045:84): user pid=11325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189626889.158:85): user pid=11329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189626889.160:86): user pid=11329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189626889.160:87): user pid=11329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189626902.199:88): user pid=11340 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189626902.201:89): user pid=11340 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189626902.201:90): user pid=11340 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189626905.208:91): user pid=11343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189626905.209:92): user pid=11343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189626905.210:93): user pid=11343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189627034.430:94): user pid=11416 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189627034.432:95): user pid=11416 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189627034.432:96): user pid=11416 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189627071.932:97): user pid=11438 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189627071.933:98): user pid=11438 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189627071.933:99): user pid=11438 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189627261.970:100): user pid=11630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189627289.340:101): user pid=11683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189627289.341:102): user pid=11683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189627289.371:103): user pid=11683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189627289.377:104): user pid=11683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189627289.377:105): user pid=11683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189630861.189:106): user pid=13778 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189634461.425:107): user pid=15120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189638061.452:108): user pid=15232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189641661.482:109): user pid=15344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189645261.521:110): user pid=15456 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189648861.557:111): user pid=15572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1189648921.571:112): user pid=15577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1189651191.499:113): user pid=16504 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189672653.811:114): user pid=16919 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189672685.576:115): user pid=17215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189672685.577:116): user pid=17215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1189672685.696:117): user pid=17215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1189672706.781:118): user pid=17215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189672719.980:119): user pid=17251 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1189672722.038:120): user pid=17251 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189672722.038:121): user pid=17251 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189672722.039:122): user pid=17251 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189672722.086:123): user pid=17251 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189672722.086:124): user pid=17251 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1189672739.064:125): user pid=17286 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189672739.064:126): user pid=17286 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189672739.165:127): user pid=17286 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189672747.269:128): user pid=17286 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189672750.500:129): user pid=17291 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189672750.501:130): user pid=17291 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189672750.512:131): user pid=17291 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189672798.784:132): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189672798.784:132): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189672849.647:133): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_END msg=audit(1189672859.225:134): user pid=17291 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189672903.074:135): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189672903.074:135): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1189673231.869:136): user pid=17475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189673231.869:137): user pid=17475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1189673231.907:138): user pid=17475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189673231.912:139): user pid=17475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189673231.912:140): user pid=17475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1189673246.118:141): avc:  denied  { write } for  pid=17530 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189673246.118:141): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfbcdf00 a2=63a494 a3=0 items=0 ppid=1 pid=17530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=user_u:system_r:setroubleshootd_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189673271.190:142): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189673305.297:143): user pid=17560 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189673305.298:144): user pid=17560 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189673305.310:145): user pid=17560 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189673312.524:146): user pid=17560 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189673320.165:147): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189673320.165:147): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189673375.689:148): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189673376.724:149): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189673376.724:149): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3098 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1189673399.121:150): user pid=17638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189673399.121:151): user pid=17638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189673399.126:152): user pid=17638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189673399.390:153): user pid=17638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1189673409.887:154): user pid=17645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189673409.887:155): user pid=17645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189673409.892:156): user pid=17645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189673417.207:157): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_END msg=audit(1189673430.189:158): user pid=17645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189673459.158:159): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189673459.158:159): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189673539.424:160): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189673610.582:161): user pid=17724 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189673610.582:162): user pid=17724 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189673610.594:163): user pid=17724 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189673615.622:164): user pid=17724 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189673813.554:165): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189673813.554:165): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1189673871.140:166): user pid=17800 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1189673871.140:167): user pid=17800 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1189673871.140:168): user pid=17800 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1189673871.147:169): user pid=17800 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1189673871.147:170): user pid=17800 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189673955.308:171): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189673957.841:172): user pid=17850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1189673957.841:173): user pid=17850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1189673957.872:174): user pid=17850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1189673963.475:175): user pid=17850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1189674061.578:176): user pid=17864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1189674164.752:177): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=17975 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189674196.704:178): user pid=17994 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189674196.704:179): user pid=17994 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189674196.709:180): user pid=17994 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189674243.337:181): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189674243.337:181): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189674398.442:182): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_END msg=audit(1189674404.434:183): user pid=17994 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189674998.323:184): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189674998.323:184): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1189675034.021:185): user pid=18235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189675034.021:186): user pid=18235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189675034.026:187): user pid=18235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189675042.058:188): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_END msg=audit(1189675049.307:189): user pid=18235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189675082.499:190): user pid=18643 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1189679173.724:191): user pid=18894 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=MAC_STATUS msg=audit(1189679206.977:192): enforcing=0 old_enforcing=1 auid=500
>type=SYSCALL msg=audit(1189679206.977:192): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfd1fe84 a2=1 a3=bfd1fe84 items=0 ppid=17251 pid=19042 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1189679206.981:193): user pid=9226 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1189679207.019:194): user pid=2124 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=ANOM_PROMISCUOUS msg=audit(1189679212.534:195): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189679212.534:195): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1189679267.328:196): user pid=19077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189679267.328:197): user pid=19077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189679267.385:198): user pid=19077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189679275.480:199): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_END msg=audit(1189679286.031:200): user pid=19077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1189679469.503:201): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=19155 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189679581.386:202): user pid=21701 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189679581.386:203): user pid=21701 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189679581.388:204): user pid=21701 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189679581.391:205): user pid=21701 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189679581.391:206): user pid=21701 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1189679617.415:207): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=21950 comm="hald-addon-acpi" sig=11
>type=DAEMON_END msg=audit(1189679727.071:7174): auditd normal halt, sending auid=500 pid=21994 subj=user_u:system_r:initrc_t:s0 res=success, auditd pid=1929
>type=DAEMON_START msg=audit(1189679727.208:8753): auditd start, ver=1.5.6, format=raw, auid=500 pid=22010 res=success, auditd pid=22010
>type=CONFIG_CHANGE msg=audit(1189679727.308:211): audit_enabled=1 old=1 by auid=500 subj=user_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189679727.308:212): audit_enabled=1 old=1 by auid=500 res=1
>type=CONFIG_CHANGE msg=audit(1189679727.318:213): audit_backlog_limit=320 old=320 by auid=500 subj=user_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189679727.318:214): audit_backlog_limit=320 old=320 by auid=500 res=1
>type=AVC msg=audit(1189679760.441:215): avc:  denied  { read } for  pid=22048 comm="setroubleshootd" name=".rpmmacros" dev=dm-5 ino=6635551 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1189679760.441:215): arch=40000003 syscall=195 success=yes exit=0 a0=bfb36430 a1=bfb365cc a2=816ff4 a3=bfb36430 items=0 ppid=1 pid=22048 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=user_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1189679760.852:216): avc:  denied  { write } for  pid=22048 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=AVC msg=audit(1189679760.852:216): avc:  denied  { connectto } for  pid=22048 comm="setroubleshootd" name="system_bus_socket" scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=unix_stream_socket
>type=SYSCALL msg=audit(1189679760.852:216): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfb4dcd0 a2=63a494 a3=0 items=0 ppid=1 pid=22048 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=user_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189679760.852:216):  path="/var/run/dbus/system_bus_socket"
>type=USER_AVC msg=audit(1189679760.855:217): user pid=2124 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=22048 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1189679760.857:218): user pid=2124 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { acquire_svc } for service=com.redhat.setroubleshootd spid=22048 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_END msg=audit(1189679792.207:219): user pid=2978 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189679792.207:220): user pid=2978 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189679796.888:221): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2609 comm="dhcdbd" sig=6
>type=AVC msg=audit(1189679805.179:222): avc:  denied  { read write } for  pid=22550 comm="modprobe" name="" dev=sockfs ino=1228719 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189679805.179:222): arch=40000003 syscall=11 success=yes exit=0 a0=9709538 a1=bfa38dc8 a2=bfa3b6a0 a3=9709538 items=0 ppid=22549 pid=22550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189679805.179:222):  path="socket:[1228719]"
>type=ANOM_ABEND msg=audit(1189679808.919:223): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2010 comm="named" sig=6
>type=DAEMON_END msg=audit(1189679811.859:8754): auditd normal halt, sending auid=4294967295 pid=22995 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=22010
>type=DAEMON_START msg=audit(1189680003.449:3899): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1912 res=success, auditd pid=1912
>type=CONFIG_CHANGE msg=audit(1189680003.548:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189680003.548:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189680003.998:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189680003.998:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189680009.912:9): avc:  denied  { read write } for  pid=2125 comm="hid2hci" name="001" dev=tmpfs ino=5495 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1189680009.912:9): arch=40000003 syscall=5 success=no exit=-13 a0=bf9c7dfc a1=2 a2=1 a3=bf9c7dfc items=0 ppid=2112 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null)
>type=AVC msg=audit(1189680009.913:10): avc:  denied  { read } for  pid=2125 comm="hid2hci" name="001" dev=tmpfs ino=5495 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1189680009.913:10): arch=40000003 syscall=5 success=no exit=-13 a0=bf9c7dfc a1=0 a2=1 a3=bf9c7dfc items=0 ppid=2112 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null)
>type=AVC msg=audit(1189680011.459:11): avc:  denied  { read write } for  pid=2228 comm="modprobe" name="" dev=sockfs ino=9174 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189680011.459:11): avc:  denied  { read write } for  pid=2228 comm="modprobe" name="" dev=sockfs ino=9196 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189680011.459:11): arch=40000003 syscall=11 success=yes exit=0 a0=8e90710 a1=bf849a18 a2=bf84ce50 a3=8e90710 items=0 ppid=2188 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189680011.459:11):  path="socket:[9196]"
>type=AVC_PATH msg=audit(1189680011.459:11):  path="socket:[9174]"
>type=AVC msg=audit(1189680011.672:12): avc:  denied  { write } for  pid=2027 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189680011.672:12): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bff5cd70 a2=63a494 a3=0 items=0 ppid=1 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189680024.394:13): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2722 comm="hald-addon-acpi" sig=11
>type=USER_ERR msg=audit(1189680027.193:14): user pid=2860 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1189680050.892:15): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189680050.895:16): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189680050.896:17): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189680050.902:18): login pid=2965 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189680050.922:19): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189680050.924:20): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1189680108.374:21): user pid=3333 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189680108.375:22): user pid=3333 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189680108.375:23): user pid=3333 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189680108.378:24): user pid=3333 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189680108.378:25): user pid=3333 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189680113.695:26): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1189680113.695:27): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1189680116.959:28): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2594 comm="dhcdbd" sig=6
>type=AVC msg=audit(1189680122.263:29): avc:  denied  { read write } for  pid=3823 comm="modprobe" name="" dev=sockfs ino=17734 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189680122.263:29): avc:  denied  { read write } for  pid=3823 comm="modprobe" name="" dev=sockfs ino=17735 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189680122.263:29): arch=40000003 syscall=11 success=yes exit=0 a0=8316530 a1=bf838568 a2=bf83ae40 a3=8316530 items=0 ppid=3822 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189680122.263:29):  path="socket:[17735]"
>type=AVC_PATH msg=audit(1189680122.263:29):  path="socket:[17734]"
>type=ANOM_ABEND msg=audit(1189680123.697:30): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1993 comm="named" sig=6
>type=DAEMON_END msg=audit(1189680124.080:3900): auditd normal halt, sending auid=4294967295 pid=4263 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1912
>type=DAEMON_START msg=audit(1189680449.427:263): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1937 res=success, auditd pid=1937
>type=CONFIG_CHANGE msg=audit(1189680449.538:66): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189680449.538:67): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189680449.567:68): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189680449.567:69): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189680457.127:70): avc:  denied  { write } for  pid=2052 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189680457.127:70): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfe0a410 a2=63a494 a3=0 items=0 ppid=1 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1189680457.222:71): avc:  denied  { read write } for  pid=2255 comm="modprobe" name="" dev=sockfs ino=19871 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189680457.222:71): avc:  denied  { read write } for  pid=2255 comm="modprobe" name="" dev=sockfs ino=19892 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189680457.222:71): arch=40000003 syscall=11 success=yes exit=0 a0=98b0710 a1=bf99eb68 a2=bf9a1fa0 a3=98b0710 items=0 ppid=2211 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189680457.222:71):  path="socket:[19892]"
>type=AVC_PATH msg=audit(1189680457.222:71):  path="socket:[19871]"
>type=USER_ERR msg=audit(1189680468.038:72): user pid=2883 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1189680468.161:73): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2749 comm="hald-addon-acpi" sig=11
>type=USER_AUTH msg=audit(1189680498.815:74): user pid=2984 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189680498.818:75): user pid=2984 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189680498.819:76): user pid=2984 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189680498.825:77): login pid=2984 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189680498.846:78): user pid=2984 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189680498.847:79): user pid=2984 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1189680539.864:80): user pid=3357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189680539.865:81): user pid=3357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189680539.866:82): user pid=3357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189680539.874:83): user pid=3357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189680539.875:84): user pid=3357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1189680655.932:85): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=3455 comm="hald-addon-acpi" sig=11
>type=ANOM_PROMISCUOUS msg=audit(1189681009.384:86): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189681009.384:86): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb7d468 a3=6 items=0 ppid=1 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189681054.036:87): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1189681188.773:88): user pid=4131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189681188.773:89): user pid=4131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189681188.883:90): user pid=4131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189681198.810:91): user pid=4131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189681225.418:92): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189681225.418:92): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb7d468 a3=6 items=0 ppid=1 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189681225.896:93): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_ACCT msg=audit(1189681261.542:94): user pid=4182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1189681345.219:95): user pid=4192 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189681345.219:96): user pid=4192 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189681345.223:97): user pid=4192 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189681348.889:98): user pid=4192 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189681428.380:99): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189681428.380:99): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb7d468 a3=6 items=0 ppid=1 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1189681531.432:100): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189681703.556:101): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189681703.556:101): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb7d468 a3=6 items=0 ppid=1 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189681764.582:102): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=4292 comm="virt-viewer" sig=11
>type=USER_AUTH msg=audit(1189682547.836:103): user pid=4328 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189682547.836:104): user pid=4328 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189682548.105:105): user pid=4328 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189682562.014:106): user pid=4328 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189682597.513:107): dev=vnet1 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189682597.513:107): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb7d468 a3=6 items=0 ppid=1 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=DAEMON_START msg=audit(1189682733.393:2570): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1939 res=success, auditd pid=1939
>type=CONFIG_CHANGE msg=audit(1189682733.493:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189682733.493:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1189682733.745:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1189682733.745:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1189682739.355:9): avc:  denied  { read write } for  pid=2152 comm="hid2hci" name="001" dev=tmpfs ino=5638 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1189682739.355:9): arch=40000003 syscall=5 success=no exit=-13 a0=bf85f48c a1=2 a2=1 a3=bf85f48c items=0 ppid=2139 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null)
>type=AVC msg=audit(1189682739.355:10): avc:  denied  { read } for  pid=2152 comm="hid2hci" name="001" dev=tmpfs ino=5638 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1189682739.355:10): arch=40000003 syscall=5 success=no exit=-13 a0=bf85f48c a1=0 a2=1 a3=bf85f48c items=0 ppid=2139 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null)
>type=AVC msg=audit(1189682740.630:11): avc:  denied  { write } for  pid=2054 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189682740.630:11): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfdf6c00 a2=63a494 a3=0 items=0 ppid=1 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1189682740.854:12): avc:  denied  { read write } for  pid=2257 comm="modprobe" name="" dev=sockfs ino=9348 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=AVC msg=audit(1189682740.854:12): avc:  denied  { read write } for  pid=2257 comm="modprobe" name="" dev=sockfs ino=9356 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1189682740.854:12): arch=40000003 syscall=11 success=yes exit=0 a0=8805710 a1=bf97ab48 a2=bf97df80 a3=8805710 items=0 ppid=2217 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=AVC_PATH msg=audit(1189682740.854:12):  path="socket:[9356]"
>type=AVC_PATH msg=audit(1189682740.854:12):  path="socket:[9348]"
>type=USER_ERR msg=audit(1189682755.070:13): user pid=2885 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1189682768.712:14): user pid=2986 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1189682768.716:15): user pid=2986 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1189682768.717:16): user pid=2986 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1189682768.723:17): login pid=2986 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1189682768.743:18): user pid=2986 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1189682768.745:19): user pid=2986 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1189682841.681:20): user pid=3363 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189682841.682:21): user pid=3363 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189682841.683:22): user pid=3363 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189682841.692:23): user pid=3363 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189682841.692:24): user pid=3363 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189682898.945:25): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189682898.945:25): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfdaf698 a3=6 items=0 ppid=1 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_ACCT msg=audit(1189684861.903:26): user pid=3524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189685502.735:27): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1189685504.415:28): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1189685504.415:28): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfdaf6a8 a3=6 items=0 ppid=1 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1189686379.420:29): user pid=3645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189686379.420:30): user pid=3645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189686379.465:31): user pid=3645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189686379.480:32): user pid=3645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189686379.480:33): user pid=3645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1189686431.313:34): avc:  denied  { write } for  pid=3750 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1189686431.313:34): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bff3aae0 a2=63a494 a3=0 items=0 ppid=1 pid=3750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=user_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_AVC msg=audit(1189686637.211:35): user pid=2134 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1189686637.154:36): policy loaded auid=500
>type=SYSCALL msg=audit(1189686637.154:36): arch=40000003 syscall=4 success=yes exit=1587291 a0=4 a1=b7d75000 a2=18385b a3=bfdef1a8 items=0 ppid=3788 pid=3789 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1189687204.118:37): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3900 comm="telepathy-gabbl" sig=6
>type=ANOM_ABEND msg=audit(1189687521.244:38): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=3603 comm="virt-viewer" sig=11
>type=USER_AUTH msg=audit(1189687531.424:39): user pid=4080 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1189687531.425:40): user pid=4080 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189687531.471:41): user pid=4080 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189687531.507:42): user pid=4080 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189687531.507:43): user pid=4080 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1189687538.867:44): user pid=4081 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189687538.871:45): user pid=4081 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189687538.871:46): user pid=4081 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1189687547.705:47): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=CRED_ACQ msg=audit(1189687801.580:48): user pid=4165 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1189687801.582:49): user pid=4165 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1189687801.582:50): user pid=4165 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1189688382.988:51): user pid=4285 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189688382.989:52): user pid=4285 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1189688383.026:53): user pid=4285 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1189688383.034:54): user pid=4285 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1189688383.034:55): user pid=4285 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1189688461.993:56): user pid=4323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'

Actions: View

Attachments on bug 289371: 194701