Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 212331 Details for
Bug 313971
couple of AVC denials breaking (among other things) NetworkManager
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
/var/log/audit.log
audit.log (text/plain), 781.74 KB, created by
Matěj Cepl
on 2007-10-01 15:06:44 UTC
(
hide
)
Description:
/var/log/audit.log
Filename:
MIME Type:
Creator:
Matěj Cepl
Created:
2007-10-01 15:06:44 UTC
Size:
781.74 KB
patch
obsolete
>type=USER_ACCT msg=audit(1189692061.089:59): user pid=6206 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189695457.016:60): user pid=6559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189695457.016:61): user pid=6559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189695457.018:62): user pid=6559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189695457.022:63): user pid=6559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189695457.022:64): user pid=6559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189695477.848:65): user pid=6561 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189695477.856:66): user pid=6561 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189695477.857:67): user pid=6561 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189695584.889:68): user pid=6942 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189695584.890:69): user pid=6942 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189695584.890:70): user pid=6942 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189695661.126:71): user pid=7013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189696237.831:72): user pid=7170 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189696237.831:73): user pid=7170 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189696237.933:74): user pid=7170 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189696255.564:75): user pid=7170 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189696262.242:76): user pid=7179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189696262.242:77): user pid=7179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189696262.243:78): user pid=7179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189696262.251:79): user pid=7179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189696262.251:80): user pid=7179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189696265.054:81): user pid=7210 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189696265.054:82): user pid=7210 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189696265.090:83): user pid=7210 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_CHAUTHTOK msg=audit(1189696699.637:84): user pid=7431 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=wbpriv exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_END msg=audit(1189696881.954:85): user pid=7210 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189699261.800:86): user pid=8211 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189699831.239:87): user pid=8287 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189699831.240:88): user pid=8287 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189699831.274:89): user pid=8287 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189699831.282:90): user pid=8287 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189699831.282:91): user pid=8287 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189699839.979:92): user pid=8292 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189699839.981:93): user pid=8292 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189699839.981:94): user pid=8292 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189699863.911:95): user pid=8294 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189699863.916:96): user pid=8294 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189699863.916:97): user pid=8294 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189701567.902:98): user pid=8544 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189701567.902:99): user pid=8544 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189702861.886:100): user pid=8602 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189703179.499:101): user pid=8992 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189718150.000:102): user pid=9427 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189718217.773:103): user pid=9682 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189718217.773:104): user pid=9682 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189718217.775:105): user pid=9682 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189718217.810:106): user pid=9682 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189718217.810:107): user pid=9682 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189720861.819:108): user pid=16778 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189721213.500:109): user pid=22846 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189746819.718:110): user pid=23275 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189748765.333:111): user pid=25434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189748765.333:112): user pid=25434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189748765.369:113): user pid=25434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189748765.393:114): user pid=25434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189748765.393:115): user pid=25434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189748776.875:116): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189748776.875:116): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfdaf698 a3=6 items=0 ppid=1 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189748780.987:117): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189748786.478:118): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189748786.478:118): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfdaf698 a3=6 items=0 ppid=1 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1189749186.896:119): user pid=25589 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189749186.897:120): user pid=25589 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189749186.946:121): user pid=25589 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189749186.971:122): user pid=25589 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189749186.971:123): user pid=25589 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_ABEND msg=audit(1189749344.086:124): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=25532 comm="virt-viewer" sig=11 >type=USER_END msg=audit(1189749368.610:125): user pid=2986 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189749368.781:126): user pid=2986 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189749399.972:127): user pid=25712 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189749399.976:128): user pid=25712 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189749399.976:129): user pid=25712 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189749400.007:130): login pid=25712 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189749400.029:131): user pid=25712 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189749400.031:132): user pid=25712 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1189749476.102:133): user pid=25712 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189749476.129:134): user pid=25712 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189749479.921:135): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2619 comm="dhcdbd" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1189749493.321:136): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_ABEND msg=audit(1189749500.000:137): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2020 comm="named" sig=6 >type=DAEMON_END msg=audit(1189749502.381:2571): auditd normal halt, sending auid=4294967295 pid=26958 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1939 >type=DAEMON_START msg=audit(1189753682.560:4267): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1908 res=success, auditd pid=1908 >type=CONFIG_CHANGE msg=audit(1189753682.660:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189753682.660:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189753683.044:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189753683.044:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1189753704.300:9): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2735 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1189753705.407:10): user pid=2865 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189753754.089:11): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189753754.092:12): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189753754.093:13): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189753754.099:14): login pid=2963 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189753754.118:15): user pid=2963 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189753754.119:16): user pid=2963 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189753818.059:17): user pid=3318 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1189753825.487:18): user pid=3318 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189753825.487:19): user pid=3318 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189753825.488:20): user pid=3318 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189753825.496:21): user pid=3318 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189753825.496:22): user pid=3318 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189753839.449:23): user pid=3350 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189753839.449:24): user pid=3350 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189753839.514:25): user pid=3350 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189753905.147:26): user pid=3350 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189753915.080:27): user pid=2963 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189753915.080:28): user pid=2963 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189753926.829:29): user pid=3373 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189753926.832:30): user pid=3373 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189753926.833:31): user pid=3373 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189753926.839:32): login pid=3373 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189753926.847:33): user pid=3373 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189753926.848:34): user pid=3373 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189753991.588:35): user pid=3704 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189753991.596:36): user pid=3704 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189753991.596:37): user pid=3704 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189754034.202:38): user pid=3745 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189754034.202:39): user pid=3745 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189754034.203:40): user pid=3745 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189754034.205:41): user pid=3745 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189754034.205:42): user pid=3745 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189754244.489:43): user pid=3813 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189754244.495:44): user pid=3813 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189754244.495:45): user pid=3813 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189754256.985:46): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189754256.985:46): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfe80f68 a3=6 items=0 ppid=1 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1189756222.499:47): user pid=4304 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189757782.614:48): user pid=4725 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189757856.137:49): user pid=3373 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189757856.147:50): user pid=3373 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189757882.098:51): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2599 comm="dhcdbd" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1189757882.496:52): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_ABEND msg=audit(1189757891.348:53): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1989 comm="named" sig=6 >type=DAEMON_END msg=audit(1189757893.853:4268): auditd normal halt, sending auid=4294967295 pid=5994 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1908 >type=DAEMON_START msg=audit(1189757976.693:5612): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1914 res=success, auditd pid=1914 >type=CONFIG_CHANGE msg=audit(1189757976.796:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189757976.796:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189757977.176:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189757977.176:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1189757999.044:9): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2741 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1189758001.126:10): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189758014.926:11): user pid=2968 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189758014.930:12): user pid=2968 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189758014.931:13): user pid=2968 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189758014.937:14): login pid=2968 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189758014.957:15): user pid=2968 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189758014.958:16): user pid=2968 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189759131.978:17): user pid=3767 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189759131.979:18): user pid=3767 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189759131.981:19): user pid=3767 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189759131.984:20): user pid=3767 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189759131.984:21): user pid=3767 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189759139.267:22): user pid=3768 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189759139.269:23): user pid=3768 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189759139.269:24): user pid=3768 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189760462.064:25): user pid=4029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189762956.576:26): user pid=5906 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189762956.577:27): user pid=5906 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189762956.611:28): user pid=5906 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189762956.619:29): user pid=5906 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189762956.619:30): user pid=5906 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USYS_CONFIG msg=audit(1189762991.499:31): user pid=6269 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189765364.610:32): user pid=6828 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1189765372.836:33): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:bluetooth_t:s0 pid=2121 comm="hcid" sig=6 >type=USER_ACCT msg=audit(1189767661.504:34): user pid=7864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189770732.529:35): user pid=8234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189770732.530:36): user pid=8234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189770732.677:37): user pid=8234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189770907.485:38): user pid=8234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189771261.572:39): user pid=8314 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189772469.835:40): user pid=8413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1189772474.478:41): user pid=8413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189772474.479:42): user pid=8413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189772474.518:43): user pid=8413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189772474.525:44): user pid=8413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189772474.525:45): user pid=8413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189773748.025:46): user pid=2968 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189773748.025:47): user pid=2968 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189773782.636:48): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2605 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1189773795.212:49): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1995 comm="named" sig=6 >type=DAEMON_END msg=audit(1189773798.475:5613): auditd normal halt, sending auid=4294967295 pid=9649 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1914 >type=DAEMON_START msg=audit(1189774053.033:2515): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1909 res=success, auditd pid=1909 >type=CONFIG_CHANGE msg=audit(1189774053.133:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189774053.133:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189774053.405:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189774053.405:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1189774077.289:9): user pid=2866 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189774080.081:10): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2736 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189774091.543:11): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189774091.546:12): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189774091.547:13): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189774091.553:14): login pid=2963 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189774091.564:15): user pid=2963 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189774091.564:16): user pid=2963 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USYS_CONFIG msg=audit(1189774174.500:17): user pid=3730 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189774202.310:18): user pid=4120 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189774236.922:19): user pid=2963 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189774236.922:20): user pid=2963 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189774239.466:21): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2600 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1189774246.047:22): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1990 comm="named" sig=6 >type=DAEMON_END msg=audit(1189774246.424:2516): auditd normal halt, sending auid=4294967295 pid=5342 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1909 >type=DAEMON_START msg=audit(1189774341.170:2711): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1955 res=success, auditd pid=1955 >type=CONFIG_CHANGE msg=audit(1189774341.270:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189774341.270:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189774341.483:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189774341.483:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1189774364.647:9): user pid=2914 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189774367.417:10): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2796 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189774377.469:11): user pid=3010 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189774377.472:12): user pid=3010 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189774377.473:13): user pid=3010 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189774377.480:14): login pid=3010 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189774377.501:15): user pid=3010 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189774377.503:16): user pid=3010 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USYS_CONFIG msg=audit(1189774428.519:17): user pid=3708 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189779108.656:18): user pid=4067 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189780146.950:19): user pid=4768 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189780146.951:20): user pid=4768 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189780146.981:21): user pid=4768 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189780146.984:22): user pid=4768 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189780146.984:23): user pid=4768 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189780191.869:24): user pid=5774 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189780191.869:25): user pid=5774 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189780191.897:26): user pid=5774 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189780191.905:27): user pid=5774 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189780191.906:28): user pid=5774 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189780240.965:29): user pid=5811 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189780240.965:30): user pid=5811 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189780240.966:31): user pid=5811 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189780257.407:32): user pid=6022 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189780257.408:33): user pid=6022 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189780257.408:34): user pid=6022 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189780278.509:35): user pid=6098 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189780278.515:36): user pid=6098 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189780278.515:37): user pid=6098 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189780706.957:38): user pid=6299 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189780706.957:39): user pid=6299 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189780706.958:40): user pid=6299 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189780706.960:41): user pid=6299 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189780706.961:42): user pid=6299 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1189780706.969:43): avc: denied { sendto } for pid=6300 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189780706.969:43): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf9353c0 a2=80019240 a3=f3 items=0 ppid=597 pid=6300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189780707.733:44): avc: denied { sendto } for pid=6302 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189780707.733:44): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf9353c0 a2=80019240 a3=f9 items=0 ppid=597 pid=6302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=CRED_ACQ msg=audit(1189780725.332:45): user pid=6305 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189780725.335:46): user pid=6305 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189780725.335:47): user pid=6305 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1189780725.341:48): avc: denied { sendto } for pid=6306 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189780725.341:48): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf9353c0 a2=80019240 a3=f3 items=0 ppid=597 pid=6306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189780728.359:49): avc: denied { sendto } for pid=6308 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189780728.359:49): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf9353c0 a2=80019240 a3=f9 items=0 ppid=597 pid=6308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=CRED_ACQ msg=audit(1189780746.095:50): user pid=6309 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189780746.097:51): user pid=6309 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189780746.097:52): user pid=6309 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189780751.998:53): user pid=6310 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189780752.002:54): user pid=6310 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189780752.002:55): user pid=6310 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1189780792.617:56): user pid=6317 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189780792.617:57): user pid=6317 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189780792.618:58): user pid=6317 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189780792.619:59): user pid=6317 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189780792.619:60): user pid=6317 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189780891.330:61): user pid=3010 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189780891.331:62): user pid=3010 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189780894.686:63): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2648 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1189780909.426:64): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2036 comm="named" sig=6 >type=DAEMON_END msg=audit(1189780909.809:2712): auditd normal halt, sending auid=4294967295 pid=7237 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1955 >type=DAEMON_START msg=audit(1189791452.744:758): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1907 res=success, auditd pid=1907 >type=CONFIG_CHANGE msg=audit(1189791452.844:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189791452.844:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189791453.071:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189791453.071:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1189791474.019:9): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2732 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1189791476.259:10): user pid=2864 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189791493.406:11): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189791493.410:12): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189791493.411:13): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189791493.417:14): login pid=2963 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189791493.437:15): user pid=2963 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189791493.438:16): user pid=2963 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189791779.295:17): user pid=3461 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189791779.295:18): user pid=3461 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189791779.296:19): user pid=3461 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189791779.298:20): user pid=3461 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189791779.298:21): user pid=3461 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189792129.107:22): user pid=3639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189792129.108:23): user pid=3639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189792129.109:24): user pid=3639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189792129.111:25): user pid=3639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189792129.112:26): user pid=3639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189792862.016:27): user pid=3885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189793049.499:28): user pid=4295 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189797893.802:29): user pid=4634 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189800061.858:30): user pid=5157 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189801062.251:31): user pid=5259 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189801062.251:32): user pid=5259 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189801062.477:33): user pid=5259 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189801075.718:34): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189801075.718:34): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfc05cf8 a3=6 items=0 ppid=1 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1189801686.971:35): user pid=5430 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189801686.971:36): user pid=5430 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189803662.365:37): user pid=5886 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189804943.271:38): user pid=6323 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189804943.271:39): user pid=6323 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189804943.343:40): user pid=6323 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189804943.496:41): user pid=6323 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189804943.496:42): user pid=6323 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189804951.188:43): user pid=6536 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189804951.189:44): user pid=6536 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189804951.189:45): user pid=6536 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1189804956.867:46): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=6600 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189805360.977:47): user pid=6654 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189805360.977:48): user pid=6654 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189805361.048:49): user pid=6654 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189805361.065:50): user pid=6654 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189805361.065:51): user pid=6654 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1189805780.649:52): auid=500 uid=68 gid=68 subj=user_u:system_r:unconfined_t:s0 pid=6736 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189806261.650:53): user pid=6866 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189806261.650:54): user pid=6866 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189806261.783:55): user pid=6866 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189806261.831:56): user pid=6866 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189806261.831:57): user pid=6866 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1189806448.861:58): user pid=7705 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=failed)' >type=USER_AUTH msg=audit(1189806451.276:59): user pid=7705 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189806451.277:60): user pid=7705 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189806451.332:61): user pid=7705 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189806451.335:62): user pid=7705 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189806451.335:63): user pid=7705 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189806477.417:64): user pid=7707 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189806477.419:65): user pid=7707 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189806477.419:66): user pid=7707 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189806496.756:67): user pid=7708 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189806496.757:68): user pid=7708 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189806496.757:69): user pid=7708 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189806506.692:70): user pid=7709 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189806506.693:71): user pid=7709 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189806506.693:72): user pid=7709 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189806595.628:73): user pid=7716 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189806595.629:74): user pid=7716 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189806595.629:75): user pid=7716 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189806711.632:76): user pid=7723 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189806711.633:77): user pid=7723 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189806711.633:78): user pid=7723 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189807261.771:79): user pid=7779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1189807462.939:80): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=7842 comm="hald-addon-acpi" sig=11 >type=USER_END msg=audit(1189807531.141:81): user pid=5259 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189808702.664:82): user pid=7929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189808702.664:83): user pid=7929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189808702.917:84): user pid=7929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189808738.432:85): user pid=7929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189810861.949:86): user pid=8278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189814461.557:87): user pid=8390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189818061.848:88): user pid=8502 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189820185.323:89): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189820185.324:90): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189820185.382:91): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189820185.395:92): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189820185.396:93): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189820190.172:94): user pid=8608 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189820190.178:95): user pid=8608 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189820190.178:96): user pid=8608 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189820204.834:97): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USYS_CONFIG msg=audit(1189820233.499:98): user pid=8955 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189840326.630:99): user pid=9426 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189841795.234:100): user pid=9740 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189841795.235:101): user pid=9740 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189841795.271:102): user pid=9740 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189841795.282:103): user pid=9740 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189841795.282:104): user pid=9740 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189841860.876:105): user pid=9829 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189841860.876:106): user pid=9829 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189841861.000:107): user pid=9829 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189841884.145:108): user pid=9829 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189841912.695:109): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189841912.695:109): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfc05ce8 a3=6 items=0 ppid=1 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1189842458.897:110): user pid=11051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189842458.897:111): user pid=11051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189842458.955:112): user pid=11051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189842458.959:113): user pid=11051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189842458.959:114): user pid=11051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_AUTH msg=audit(1189842988.767:115): user pid=11137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189842988.767:116): user pid=11137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189842988.834:117): user pid=11137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189842988.859:118): user pid=11137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189842988.859:119): user pid=11137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189843035.678:120): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189843209.164:121): user pid=11307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ACCT msg=audit(1189843261.354:122): user pid=11338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189843540.011:123): user pid=11349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189843540.011:124): user pid=11349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189843540.204:125): user pid=11349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189846861.444:126): user pid=11564 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189850461.485:127): user pid=11676 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189854061.513:128): user pid=11788 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189857661.540:129): user pid=11900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189861261.568:130): user pid=12017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189864861.602:131): user pid=12223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1189864888.543:132): user pid=11349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189864902.306:133): user pid=12227 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189864902.306:134): user pid=12227 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189864902.322:135): user pid=12227 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189864925.118:136): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189864925.118:136): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfc05cf8 a3=6 items=0 ppid=1 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189867646.225:137): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189867656.229:138): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189867656.229:138): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfc05cf8 a3=6 items=0 ppid=1 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189868058.367:139): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189868062.315:140): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189868062.315:140): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfc05cf8 a3=6 items=0 ppid=1 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189868275.563:141): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1189868279.504:142): user pid=12227 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189868461.737:143): user pid=12890 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189870137.958:144): user pid=19709 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189870137.959:145): user pid=19709 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189870138.017:146): user pid=19709 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189870138.021:147): user pid=19709 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189870138.021:148): user pid=19709 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189872061.328:149): user pid=25032 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189875661.410:150): user pid=32317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189879261.486:151): user pid=32590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189881688.903:152): user pid=32762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189881688.903:153): user pid=32762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189881689.037:154): user pid=32762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189881785.422:155): user pid=32762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189882861.520:156): user pid=383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189886461.576:157): user pid=2506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189890061.609:158): user pid=3527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189893661.643:159): user pid=4226 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189895444.932:160): user pid=4638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189895444.932:161): user pid=4638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189895444.959:162): user pid=4638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189895444.966:163): user pid=4638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189895444.967:164): user pid=4638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189897261.686:165): user pid=5701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189898997.540:166): user pid=6238 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189898997.540:167): user pid=6238 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189898997.542:168): user pid=6238 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189898997.545:169): user pid=6238 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189898997.545:170): user pid=6238 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189899014.780:171): user pid=6240 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189899014.788:172): user pid=6240 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189899014.789:173): user pid=6240 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USYS_CONFIG msg=audit(1189899622.499:174): user pid=6645 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189923988.854:175): user pid=7118 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189924434.753:176): user pid=7381 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189924434.754:177): user pid=7381 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189924434.755:178): user pid=7381 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189924434.764:179): user pid=7381 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189924434.764:180): user pid=7381 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1189925496.483:181): user pid=8098 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189925496.484:182): user pid=8098 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189925496.486:183): user pid=8098 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189925496.489:184): user pid=8098 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189925496.489:185): user pid=8098 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189925514.846:186): user pid=8099 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189925514.848:187): user pid=8099 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189925514.848:188): user pid=8099 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189926061.566:189): user pid=8206 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189929661.639:190): user pid=8427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189933261.673:191): user pid=8574 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189933520.126:192): user pid=8657 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189933520.126:193): user pid=8657 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189933520.128:194): user pid=8657 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189933520.138:195): user pid=8657 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189933520.138:196): user pid=8657 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1189934234.190:197): user pid=8907 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1189934236.679:198): user pid=8907 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189934236.679:199): user pid=8907 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189934236.680:200): user pid=8907 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189934236.690:201): user pid=8907 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189934236.690:202): user pid=8907 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189936861.924:203): user pid=14696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189937770.499:204): user pid=15130 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190012546.932:205): user pid=15551 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190015759.499:206): user pid=17723 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190018536.115:207): user pid=18073 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1190018632.391:5750): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1943 res=success, auditd pid=1943 >type=CONFIG_CHANGE msg=audit(1190018632.491:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190018632.491:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190018632.669:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190018632.669:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1190018653.402:9): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2794 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1190018655.546:10): user pid=2921 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190018671.401:11): user pid=3022 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190018671.404:12): user pid=3022 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190018671.405:13): user pid=3022 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190018671.411:14): login pid=3022 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190018671.432:15): user pid=3022 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190018671.434:16): user pid=3022 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190018738.467:17): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3376 comm="telepathy-idle" sig=6 >type=USER_AUTH msg=audit(1190019041.147:18): user pid=3619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1190019048.376:19): user pid=3619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190019048.376:20): user pid=3619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190019048.376:21): user pid=3619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190019048.385:22): user pid=3619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190019048.385:23): user pid=3619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1190019652.925:24): user pid=4683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190019652.925:25): user pid=4683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190019652.927:26): user pid=4683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190019652.932:27): user pid=4683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190019652.932:28): user pid=4683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190019661.930:29): user pid=4712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190019662.647:30): user pid=4711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190019662.647:31): user pid=4711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190019662.648:32): user pid=4711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190019662.653:33): user pid=4711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190019662.653:34): user pid=4711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190019984.334:35): user pid=3022 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190019984.335:36): user pid=3022 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190019987.632:37): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2634 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1190019994.448:38): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2024 comm="named" sig=6 >type=DAEMON_END msg=audit(1190019994.844:5751): auditd normal halt, sending auid=4294967295 pid=5739 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1943 >type=DAEMON_START msg=audit(1190020108.747:645): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1912 res=success, auditd pid=1912 >type=CONFIG_CHANGE msg=audit(1190020108.847:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190020108.847:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190020108.906:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190020108.906:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1190020130.333:9): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2752 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1190020131.947:10): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190020156.787:11): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1190020156.789:12): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1190020162.956:13): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1190020162.956:14): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1190020168.173:15): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190020168.176:16): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190020168.177:17): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190020168.182:18): login pid=2998 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190020168.202:19): user pid=2998 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190020168.203:20): user pid=2998 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190020405.649:21): user pid=3556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190020405.649:22): user pid=3556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190020405.747:23): user pid=3556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190020405.918:24): user pid=3556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190020405.918:25): user pid=3556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190023261.997:26): user pid=4910 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190023542.921:27): user pid=4985 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190023542.922:28): user pid=4985 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190023542.980:29): user pid=4985 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190023542.984:30): user pid=4985 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190023542.984:31): user pid=4985 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190023550.148:32): user pid=4986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190023550.150:33): user pid=4986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190023550.150:34): user pid=4986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1190024035.943:35): user pid=5267 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190024035.943:36): user pid=5267 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190024035.944:37): user pid=5267 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190024035.947:38): user pid=5267 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190024035.947:39): user pid=5267 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1190024491.246:40): user pid=6101 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190024491.247:41): user pid=6101 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190024491.316:42): user pid=6101 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190024491.319:43): user pid=6101 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190024491.319:44): user pid=6101 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1190026566.577:45): user pid=6628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190026566.577:46): user pid=6628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190026566.579:47): user pid=6628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190026566.581:48): user pid=6628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190026566.581:49): user pid=6628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190026684.102:50): user pid=6684 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190026684.102:51): user pid=6684 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190026684.102:52): user pid=6684 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1190026791.030:53): user pid=6699 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190026791.030:54): user pid=6699 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190026791.031:55): user pid=6699 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190026791.033:56): user pid=6699 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190026791.033:57): user pid=6699 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190026861.194:58): user pid=6709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190027959.690:59): user pid=6840 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190027959.690:60): user pid=6840 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190027959.692:61): user pid=6840 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190027959.700:62): user pid=6840 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190027959.700:63): user pid=6840 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1190028132.604:64): user pid=6909 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190028132.604:65): user pid=6909 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190028132.605:66): user pid=6909 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190028132.609:67): user pid=6909 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190028132.609:68): user pid=6909 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190028307.982:69): user pid=6988 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190028307.989:70): user pid=6988 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190028307.989:71): user pid=6988 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190028322.913:72): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190028322.913:72): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfc79d68 a3=6 items=0 ppid=1 pid=2615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1190028346.707:73): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190028374.332:74): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190028374.332:74): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfc79d68 a3=6 items=0 ppid=1 pid=2615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1190030462.397:75): user pid=7214 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190031640.433:76): user pid=7365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=failed)' >type=USER_AUTH msg=audit(1190031642.683:77): user pid=7365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190031642.683:78): user pid=7365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190031642.744:79): user pid=7365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190031642.766:80): user pid=7365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190031642.766:81): user pid=7365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190031646.891:82): user pid=7366 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190031646.899:83): user pid=7366 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190031646.899:84): user pid=7366 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190031653.965:85): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190031662.962:86): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190031662.962:86): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfc79d68 a3=6 items=0 ppid=1 pid=2615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1190032290.192:87): user pid=7526 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190032290.192:88): user pid=7526 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190032290.430:89): user pid=7526 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190032680.639:90): user pid=7562 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_END msg=audit(1190032692.946:91): user pid=7526 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190032727.643:92): user pid=7591 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190032727.643:93): user pid=7591 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190032727.676:94): user pid=7591 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190032727.683:95): user pid=7591 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190032727.683:96): user pid=7591 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190034061.769:97): user pid=7942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190036202.089:98): user pid=8364 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190036202.090:99): user pid=8364 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190036202.132:100): user pid=8364 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190036202.169:101): user pid=8364 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190036202.169:102): user pid=8364 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1190037087.749:103): user pid=10274 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1190037087.750:104): user pid=10274 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_ACQ msg=audit(1190037087.982:105): user pid=10274 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1190037087.994:106): user pid=10274 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1190037087.994:107): user pid=10274 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1190037662.443:108): user pid=10515 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190041262.356:109): user pid=11500 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190043113.488:110): user pid=16399 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190043113.488:111): user pid=16399 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190043113.564:112): user pid=16399 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190043113.594:113): user pid=16399 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190043113.594:114): user pid=16399 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1190043903.637:115): user pid=18365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190043903.637:116): user pid=18365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190043903.723:117): user pid=18365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190043903.730:118): user pid=18365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190043903.730:119): user pid=18365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190044862.062:120): user pid=18485 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190048461.354:121): user pid=18900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190050592.835:122): user pid=20005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190050592.835:123): user pid=20005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190050592.901:124): user pid=20005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190050592.905:125): user pid=20005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190050592.905:126): user pid=20005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190050618.813:127): user pid=20008 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190050618.819:128): user pid=20008 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190050618.819:129): user pid=20008 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190050709.484:130): user pid=20049 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190050709.486:131): user pid=20049 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190050709.486:132): user pid=20049 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190051361.906:133): user pid=20175 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190051361.906:134): user pid=20175 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190051361.958:135): user pid=20175 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190051361.971:136): user pid=20175 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190051361.971:137): user pid=20175 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190052061.498:138): user pid=8007 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190052332.857:139): user pid=8584 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190052332.857:140): user pid=8584 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190052332.898:141): user pid=8584 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190052332.952:142): user pid=8584 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190052332.952:143): user pid=8584 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190053324.499:144): user pid=9182 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190053358.096:145): user pid=9622 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190053632.499:146): user pid=10075 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190053664.106:147): user pid=10480 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190053835.092:148): user pid=2998 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190053835.367:149): user pid=2998 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190053844.347:150): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2603 comm="dhcdbd" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1190053846.094:151): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_ABEND msg=audit(1190053859.462:152): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1993 comm="named" sig=6 >type=DAEMON_END msg=audit(1190053861.346:646): auditd normal halt, sending auid=4294967295 pid=11569 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1912 >type=DAEMON_START msg=audit(1190054084.524:9302): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1909 res=success, auditd pid=1909 >type=CONFIG_CHANGE msg=audit(1190054084.625:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190054084.625:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190054084.898:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190054084.898:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1190054106.477:9): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2739 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1190054108.068:10): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190054123.828:11): user pid=2988 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190054123.831:12): user pid=2988 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190054123.832:13): user pid=2988 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190054123.837:14): login pid=2988 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190054123.845:15): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190054123.846:16): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USYS_CONFIG msg=audit(1190054251.499:17): user pid=3689 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190055036.471:18): user pid=4118 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190055661.763:19): user pid=4635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1190056074.500:20): user pid=5121 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190092210.916:21): user pid=5504 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190093119.500:22): user pid=6105 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190093365.299:23): user pid=6489 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190093458.223:24): user pid=6660 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190093458.224:25): user pid=6660 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190093458.248:26): user pid=6660 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190093458.268:27): user pid=6660 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190093458.268:28): user pid=6660 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190093736.757:29): user pid=7050 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190093736.757:30): user pid=7050 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190093736.783:31): user pid=7050 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190093736.788:32): user pid=7050 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190093736.788:33): user pid=7050 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190093966.927:34): user pid=7075 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190093966.928:35): user pid=7075 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190093966.929:36): user pid=7075 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USYS_CONFIG msg=audit(1190094440.499:37): user pid=7416 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190100339.352:38): user pid=7738 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190101526.499:39): user pid=8429 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190106246.340:40): user pid=8793 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190106352.482:41): user pid=8949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190106352.483:42): user pid=8949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190106352.484:43): user pid=8949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190106352.514:44): user pid=8949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190106352.514:45): user pid=8949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190106423.454:46): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190106423.455:47): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190106427.818:48): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2600 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1190106437.961:49): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1990 comm="named" sig=6 >type=DAEMON_END msg=audit(1190106441.421:9303): auditd normal halt, sending auid=4294967295 pid=10310 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1909 >type=DAEMON_START msg=audit(1190106514.782:6029): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1907 res=success, auditd pid=1907 >type=CONFIG_CHANGE msg=audit(1190106514.882:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190106514.882:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190106515.143:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190106515.143:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1190106538.515:9): user pid=2885 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190106552.907:10): user pid=2988 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190106552.911:11): user pid=2988 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190106552.912:12): user pid=2988 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190106552.918:13): login pid=2988 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190106552.927:14): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190106552.928:15): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190106915.696:16): user pid=3477 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190106915.696:17): user pid=3477 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190106915.781:18): user pid=3477 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190107188.249:19): user pid=3477 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190107193.500:20): user pid=3501 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190107193.501:21): user pid=3501 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190107193.507:22): user pid=3501 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190107270.272:23): user pid=3501 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190107351.444:24): user pid=3518 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190107351.444:25): user pid=3518 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190107351.450:26): user pid=3518 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190107577.273:27): user pid=3518 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190107594.308:28): user pid=3537 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190107594.308:29): user pid=3537 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190107594.332:30): user pid=3537 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190107594.339:31): user pid=3537 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190107594.339:32): user pid=3537 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1190108572.583:33): user pid=3719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190108577.895:34): user pid=3719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190108577.896:35): user pid=3719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190108577.896:36): user pid=3719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190108577.903:37): user pid=3719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190108577.903:38): user pid=3719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1190109253.444:39): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1988 comm="named" sig=6 >type=USER_ACCT msg=audit(1190109661.227:40): user pid=5236 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190109814.767:41): user pid=5267 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1190109887.296:42): user pid=5267 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190109887.296:43): user pid=5267 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190109887.374:44): user pid=5267 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190109887.380:45): user pid=5267 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190109887.380:46): user pid=5267 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190109901.418:47): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190109901.418:47): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff9d888 a3=6 items=0 ppid=1 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1190110696.373:48): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=5333 comm="virt-viewer" sig=11 >type=USER_ACCT msg=audit(1190113261.446:49): user pid=15995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190115626.524:50): user pid=18038 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190115626.524:51): user pid=18038 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190115626.606:52): user pid=18038 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190115626.691:53): user pid=18038 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190115626.691:54): user pid=18038 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190116861.589:55): user pid=19225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190118021.447:56): user pid=20074 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190118021.448:57): user pid=20074 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190118021.529:58): user pid=20074 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190118021.563:59): user pid=20074 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190118021.563:60): user pid=20074 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190118314.934:61): user pid=13198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190118314.951:62): user pid=13198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190118314.951:63): user pid=13198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_ABEND msg=audit(1190118327.123:64): auid=500 uid=68 gid=68 subj=user_u:system_r:unconfined_t:s0 pid=13297 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1190119171.631:65): user pid=13743 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190119171.631:66): user pid=13743 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190119171.690:67): user pid=13743 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190119171.721:68): user pid=13743 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190119171.721:69): user pid=13743 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_ABEND msg=audit(1190119271.722:70): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=13834 comm="hald-addon-acpi" sig=11 >type=MAC_POLICY_LOAD msg=audit(1190119356.032:71): policy loaded auid=500 >type=SYSCALL msg=audit(1190119356.032:71): arch=40000003 syscall=4 success=yes exit=1593010 a0=4 a1=b7db3000 a2=184eb2 a3=bf84f0f8 items=0 ppid=13877 pid=13879 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null) >type=USER_AVC msg=audit(1190119356.289:72): user pid=2102 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=DAEMON_END msg=audit(1190119396.016:6030): auditd normal halt, sending auid=500 pid=13901 subj=user_u:system_r:initrc_t:s0 res=success, auditd pid=1907 >type=DAEMON_START msg=audit(1190119396.308:2006): auditd start, ver=1.5.6, format=raw, auid=500 pid=13917 res=success, auditd pid=13917 >type=CONFIG_CHANGE msg=audit(1190119396.408:75): audit_enabled=1 old=1 by auid=500 subj=user_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190119396.408:76): audit_enabled=1 old=1 by auid=500 res=1 >type=CONFIG_CHANGE msg=audit(1190119396.432:77): audit_backlog_limit=320 old=320 by auid=500 subj=user_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190119396.432:78): audit_backlog_limit=320 old=320 by auid=500 res=1 >type=USER_AUTH msg=audit(1190119758.440:79): user pid=14004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190119758.440:80): user pid=14004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190119758.584:81): user pid=14004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190120307.147:82): user pid=14137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190120307.148:83): user pid=14137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190120307.183:84): user pid=14137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190120307.245:85): user pid=14137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190120307.245:86): user pid=14137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_ABEND msg=audit(1190120333.471:87): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=14168 comm="virt-viewer" sig=11 >type=USER_ACCT msg=audit(1190120461.626:88): user pid=14177 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1190121247.500:89): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=14282 comm="virt-viewer" sig=11 >type=ANOM_PROMISCUOUS msg=audit(1190121258.839:90): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190121263.387:91): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190121263.387:91): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff9d888 a3=6 items=0 ppid=1 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1190121866.535:92): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=14328 comm="virt-viewer" sig=11 >type=USER_END msg=audit(1190121942.030:93): user pid=14004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190122039.635:94): user pid=14467 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190122039.635:95): user pid=14467 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190122039.676:96): user pid=14467 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190122039.704:97): user pid=14467 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190122039.704:98): user pid=14467 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190122049.977:99): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190122057.709:100): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190122057.709:100): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff9d888 a3=6 items=0 ppid=1 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1190122943.604:101): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_ACCT msg=audit(1190124062.188:102): user pid=14967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190127661.298:103): user pid=16851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190128029.276:104): user pid=17260 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190128029.276:105): user pid=17260 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190128029.419:106): user pid=17260 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190128154.595:107): user pid=17260 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190128488.068:108): user pid=17410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190128488.068:109): user pid=17410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190128488.094:110): user pid=17410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190128526.356:111): user pid=17410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190129415.595:112): avc: denied { getattr } for pid=17674 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190129415.595:112): arch=40000003 syscall=195 success=no exit=-13 a0=a059f78 a1=bfcf0af8 a2=816ff4 a3=a059f78 items=0 ppid=17672 pid=17674 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1190129415.595:112): path="/var/log/pm-suspend.log" >type=AVC msg=audit(1190129415.676:113): avc: denied { write } for pid=17674 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190129415.676:113): arch=40000003 syscall=5 success=no exit=-13 a0=a054420 a1=8241 a2=1b6 a3=8241 items=0 ppid=17672 pid=17674 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190129415.676:114): avc: denied { write } for pid=17674 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190129415.676:114): arch=40000003 syscall=5 success=no exit=-13 a0=a054420 a1=8201 a2=0 a3=8201 items=0 ppid=17672 pid=17674 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190129421.500:115): user pid=18001 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190129977.909:116): user pid=18453 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1190129978.381:117): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:bluetooth_t:s0 pid=2114 comm="hcid" sig=6 >type=USER_AUTH msg=audit(1190130035.567:118): user pid=18734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190130035.567:119): user pid=18734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190130035.568:120): user pid=18734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190130035.612:121): user pid=18734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190130035.612:122): user pid=18734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190130080.924:123): user pid=18741 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190130080.927:124): user pid=18741 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190130080.927:125): user pid=18741 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190130197.759:126): user pid=18760 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190130197.761:127): user pid=18760 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190130197.761:128): user pid=18760 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190130219.066:129): user pid=18765 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190130219.067:130): user pid=18765 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190130219.067:131): user pid=18765 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190130816.030:132): user pid=13211 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190130816.031:133): user pid=13211 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190130816.031:134): user pid=13211 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190130816.033:135): user pid=13211 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190130816.033:136): user pid=13211 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190130837.260:137): user pid=13214 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190130837.262:138): user pid=13214 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190130837.262:139): user pid=13214 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1190130914.857:140): avc: denied { getattr } for pid=13232 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190130914.857:140): arch=40000003 syscall=195 success=no exit=-13 a0=8661f78 a1=bf9b0fb8 a2=816ff4 a3=8661f78 items=0 ppid=13231 pid=13232 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1190130914.857:140): path="/var/log/pm-suspend.log" >type=AVC msg=audit(1190130914.857:141): avc: denied { write } for pid=13232 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190130914.857:141): arch=40000003 syscall=5 success=no exit=-13 a0=865c420 a1=8241 a2=1b6 a3=8241 items=0 ppid=13231 pid=13232 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190130914.857:142): avc: denied { write } for pid=13232 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190130914.857:142): arch=40000003 syscall=5 success=no exit=-13 a0=865c420 a1=8201 a2=0 a3=8201 items=0 ppid=13231 pid=13232 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190130930.499:143): user pid=13575 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190139696.093:144): user pid=13911 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190139790.236:145): avc: denied { getattr } for pid=14044 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190139790.236:145): arch=40000003 syscall=195 success=no exit=-13 a0=9c25f78 a1=bfa3f048 a2=816ff4 a3=9c25f78 items=0 ppid=14043 pid=14044 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1190139790.236:145): path="/var/log/pm-suspend.log" >type=AVC msg=audit(1190139790.236:146): avc: denied { write } for pid=14044 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190139790.236:146): arch=40000003 syscall=5 success=no exit=-13 a0=9c20420 a1=8241 a2=1b6 a3=8241 items=0 ppid=14043 pid=14044 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190139790.236:147): avc: denied { write } for pid=14044 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190139790.236:147): arch=40000003 syscall=5 success=no exit=-13 a0=9c20420 a1=8201 a2=0 a3=8201 items=0 ppid=14043 pid=14044 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190139794.499:148): user pid=14232 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190141245.731:149): user pid=14645 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190141273.361:150): user pid=14812 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190141277.394:151): user pid=14812 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190141279.155:152): user pid=14812 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190141279.155:153): user pid=14812 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190141279.182:154): user pid=14812 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190141279.203:155): user pid=14812 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190141279.203:156): user pid=14812 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190141329.969:157): user pid=15341 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190141329.975:158): user pid=15341 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190141329.975:159): user pid=15341 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190141545.530:160): user pid=15872 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190141545.532:161): user pid=15872 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190141545.532:162): user pid=15872 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190141794.834:163): user pid=18311 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190141794.834:164): user pid=18311 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190141794.894:165): user pid=18311 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190142061.861:166): user pid=18364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190142137.966:167): user pid=22730 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190142140.696:168): user pid=22730 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190142140.696:169): user pid=22730 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190142140.696:170): user pid=22730 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190142140.700:171): user pid=22730 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190142140.700:172): user pid=22730 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190142233.085:173): user pid=22745 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190142233.093:174): user pid=22745 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190142233.094:175): user pid=22745 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190142247.740:176): user pid=22777 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190142247.742:177): user pid=22777 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190142247.742:178): user pid=22777 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190142253.393:179): user pid=22778 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190142253.395:180): user pid=22778 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190142253.395:181): user pid=22778 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190142636.761:182): user pid=18311 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190144690.655:183): user pid=29106 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190144690.655:184): user pid=29106 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190144690.707:185): user pid=29106 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190144690.716:186): user pid=29106 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190144690.716:187): user pid=29106 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1190145188.184:188): user pid=30144 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190145188.185:189): user pid=30144 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190145188.185:190): user pid=30144 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190145188.187:191): user pid=30144 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190145188.187:192): user pid=30144 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190145661.120:193): user pid=644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190147770.990:194): user pid=3915 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190147770.990:195): user pid=3915 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190147770.991:196): user pid=3915 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190147770.993:197): user pid=3915 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190147770.993:198): user pid=3915 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190147777.849:199): user pid=4128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190147777.851:200): user pid=4128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190147777.851:201): user pid=4128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=DAEMON_START msg=audit(1190191044.367:5068): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1964 res=success, auditd pid=1964 >type=CONFIG_CHANGE msg=audit(1190191044.467:68): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190191044.467:69): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190191044.497:70): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190191044.497:71): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1190191067.425:72): user pid=2945 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190191273.441:73): user pid=3051 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190191273.444:74): user pid=3051 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190191273.445:75): user pid=3051 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190191273.450:76): login pid=3051 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190191273.471:77): user pid=3051 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190191273.473:78): user pid=3051 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190191339.481:79): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3404 comm="telepathy-idle" sig=6 >type=USER_ACCT msg=audit(1190192461.511:80): user pid=3538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1190195043.964:81): avc: denied { search } for pid=8527 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190195043.964:81): arch=40000003 syscall=195 success=no exit=-13 a0=9e0cdf0 a1=bf956f6c a2=816ff4 a3=0 items=0 ppid=8519 pid=8527 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1190195043.964:82): avc: denied { search } for pid=8527 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190195043.964:82): arch=40000003 syscall=5 success=no exit=-13 a0=9e0cdf0 a1=8000 a2=0 a3=8000 items=0 ppid=8519 pid=8527 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1190195565.488:83): user pid=8556 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190195565.488:84): user pid=8556 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190195565.585:85): user pid=8556 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1190195969.699:86): user pid=8587 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=deleting user entries acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1190195969.707:87): user pid=8587 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=deleting group acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1190195970.080:88): user pid=8593 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=deleting group acct=rpc exe="/usr/sbin/groupdel" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1190195970.100:89): user pid=8594 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=rpc exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1190195970.181:90): user pid=8598 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=rpc exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1190195978.567:91): user pid=8621 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=mailnull exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1190195978.568:92): user pid=8622 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=smmsp exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1190195989.486:93): user pid=8639 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=rpcuser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1190196006.305:94): user pid=8693 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=apache exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_END msg=audit(1190196038.998:95): user pid=8556 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190196061.728:96): user pid=8910 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190196071.705:97): user pid=8913 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190196071.705:98): user pid=8913 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190196071.747:99): user pid=8913 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190196199.201:100): user pid=8913 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190199661.772:101): user pid=9436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190202020.491:102): user pid=9647 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190202020.492:103): user pid=9647 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190202020.516:104): user pid=9647 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190202020.519:105): user pid=9647 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190202020.519:106): user pid=9647 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190203261.847:107): user pid=9791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190206861.885:108): user pid=10083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190208169.311:109): user pid=10223 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190208169.312:110): user pid=10223 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190208169.312:111): user pid=10223 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190208169.320:112): user pid=10223 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190208169.320:113): user pid=10223 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190208179.502:114): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190208179.502:114): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8f29d8 a3=6 items=0 ppid=1 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1190208193.135:115): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190208204.784:116): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190208204.784:116): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8f29d8 a3=6 items=0 ppid=1 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1190210462.082:117): user pid=10748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190211771.096:118): user pid=11059 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190211771.096:119): user pid=11059 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190211771.160:120): user pid=11059 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190211771.173:121): user pid=11059 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190211771.173:122): user pid=11059 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190211790.563:123): user pid=11069 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190211790.576:124): user pid=11069 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190211790.576:125): user pid=11069 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1190213102.812:126): user pid=11373 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190213102.812:127): user pid=11373 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190213102.857:128): user pid=11373 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190213102.869:129): user pid=11373 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190213102.869:130): user pid=11373 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1190213506.788:131): user pid=11458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190213506.788:132): user pid=11458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190213507.253:133): user pid=11458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190214063.886:134): user pid=11551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1190214636.143:135): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=10336 comm="virt-viewer" sig=11 >type=USER_AUTH msg=audit(1190214649.142:136): user pid=11625 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190214649.142:137): user pid=11625 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190214649.249:138): user pid=11625 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190214649.280:139): user pid=11625 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190214649.281:140): user pid=11625 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190214660.904:141): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190214673.772:142): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190214673.772:142): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8f29d8 a3=6 items=0 ppid=1 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_END msg=audit(1190215808.297:143): user pid=11458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190217151.706:144): user pid=12085 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190217151.706:145): user pid=12085 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190217151.833:146): user pid=12085 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190217151.835:147): user pid=12085 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190217151.835:148): user pid=12085 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190217661.624:149): user pid=12152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190218141.077:150): user pid=12254 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1190218145.916:151): user pid=12254 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1190218148.992:152): user pid=12254 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190218148.992:153): user pid=12254 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190218149.073:154): user pid=12254 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190218149.097:155): user pid=12254 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190218149.098:156): user pid=12254 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190218159.183:157): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1190218183.485:158): user pid=12304 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190218183.486:159): user pid=12304 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190218183.654:160): user pid=12304 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190218282.465:161): user pid=12304 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190219451.297:162): user pid=12751 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190219451.297:163): user pid=12751 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190219501.302:164): user pid=12759 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190219501.302:165): user pid=12759 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190219507.820:166): user pid=12763 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190219507.820:167): user pid=12763 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190219515.500:168): user pid=13036 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190219963.000:169): user pid=13693 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1190219964.056:170): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:bluetooth_t:s0 pid=2172 comm="hcid" sig=6 >type=USER_AUTH msg=audit(1190220085.503:171): user pid=14905 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190220085.503:172): user pid=14905 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190220085.504:173): user pid=14905 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190220085.508:174): user pid=14905 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190220085.508:175): user pid=14905 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190220104.749:176): user pid=15118 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190220104.754:177): user pid=15118 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190220104.754:178): user pid=15118 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_ABEND msg=audit(1190220132.131:179): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=15175 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1190220991.709:180): user pid=15361 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190220991.710:181): user pid=15361 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190220996.500:182): user pid=15838 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190226477.254:183): user pid=16142 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190226545.076:184): user pid=16350 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190226545.076:185): user pid=16350 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190226545.078:186): user pid=16350 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190226545.082:187): user pid=16350 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190226545.083:188): user pid=16350 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190227951.726:189): user pid=16552 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190227951.727:190): user pid=16552 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190227951.728:191): user pid=16552 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190227951.732:192): user pid=16552 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190227951.732:193): user pid=16552 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190228066.584:194): user pid=16793 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190228066.595:195): user pid=16793 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190228066.595:196): user pid=16793 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190228220.943:197): user pid=17084 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190228220.951:198): user pid=17084 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190228220.951:199): user pid=17084 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190228461.138:200): user pid=17289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190229438.925:201): user pid=17868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190229438.925:202): user pid=17868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190229438.927:203): user pid=17868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190229438.930:204): user pid=17868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190229438.930:205): user pid=17868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190229456.957:206): user pid=17881 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190229456.958:207): user pid=17881 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190229456.958:208): user pid=17881 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190232061.195:209): user pid=18391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190235661.256:210): user pid=18870 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190238840.611:211): user pid=20049 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190238840.612:212): user pid=20049 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190238840.613:213): user pid=20049 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190238840.617:214): user pid=20049 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190238840.617:215): user pid=20049 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190239251.062:216): user pid=20143 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190239251.062:217): user pid=20143 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190239251.063:218): user pid=20143 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190239251.065:219): user pid=20143 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190239251.065:220): user pid=20143 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190239261.341:221): user pid=20146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190240418.964:222): user pid=2211 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1190240421.793:223): user pid=2211 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190240421.793:224): user pid=2211 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190240421.794:225): user pid=2211 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190240421.795:226): user pid=2211 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190240421.796:227): user pid=2211 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1190241185.233:228): avc: denied { getattr } for pid=2415 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190241185.233:228): arch=40000003 syscall=195 success=no exit=-13 a0=8f6df78 a1=bfa06008 a2=816ff4 a3=8f6df78 items=0 ppid=2411 pid=2415 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1190241185.233:228): path="/var/log/pm-suspend.log" >type=AVC msg=audit(1190241185.233:229): avc: denied { write } for pid=2415 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190241185.233:229): arch=40000003 syscall=5 success=no exit=-13 a0=8f68420 a1=8241 a2=1b6 a3=8241 items=0 ppid=2411 pid=2415 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190241185.233:230): avc: denied { write } for pid=2415 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190241185.233:230): arch=40000003 syscall=5 success=no exit=-13 a0=8f68420 a1=8201 a2=0 a3=8201 items=0 ppid=2411 pid=2415 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190241188.340:231): avc: denied { search } for pid=2653 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190241188.340:231): arch=40000003 syscall=33 success=no exit=-13 a0=9ca0c00 a1=4 a2=3a1c96c a3=9c99004 items=0 ppid=2646 pid=2653 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190241190.500:232): user pid=2809 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190299142.419:233): user pid=3276 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190299143.230:234): avc: denied { search } for pid=3338 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190299143.230:234): arch=40000003 syscall=33 success=no exit=-13 a0=9399c00 a1=4 a2=3a1c96c a3=9392004 items=0 ppid=3335 pid=3338 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USER_AUTH msg=audit(1190299235.561:235): user pid=3692 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190299235.561:236): user pid=3692 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190299235.564:237): user pid=3692 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190299235.572:238): user pid=3692 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190299235.572:239): user pid=3692 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190299329.670:240): user pid=4181 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190299329.680:241): user pid=4181 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190299329.681:242): user pid=4181 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190299355.244:243): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190299355.244:243): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8f29d8 a3=6 items=0 ppid=1 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1190300462.168:244): user pid=4363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1190302109.199:245): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=4272 comm="virt-viewer" sig=11 >type=USER_ACCT msg=audit(1190304061.802:246): user pid=4621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1190304068.993:247): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=4623 comm="virt-viewer" sig=11 >type=ANOM_PROMISCUOUS msg=audit(1190304076.091:248): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190304079.473:249): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190304079.473:249): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8f29d8 a3=6 items=0 ppid=1 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1190304233.281:250): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=4665 comm="virt-viewer" sig=11 >type=USER_AUTH msg=audit(1190305220.762:251): user pid=4876 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190305220.763:252): user pid=4876 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190305220.863:253): user pid=4876 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190305260.757:254): user pid=4876 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190305290.931:255): avc: denied { getattr } for pid=4926 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190305290.931:255): arch=40000003 syscall=195 success=no exit=-13 a0=8a82f78 a1=bfefb4f8 a2=816ff4 a3=8a82f78 items=0 ppid=4925 pid=4926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1190305290.931:255): path="/var/log/pm-suspend.log" >type=AVC msg=audit(1190305291.038:256): avc: denied { write } for pid=4926 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190305291.038:256): arch=40000003 syscall=5 success=no exit=-13 a0=8a7d420 a1=8241 a2=1b6 a3=8241 items=0 ppid=4925 pid=4926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190305291.038:257): avc: denied { write } for pid=4926 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190305291.038:257): arch=40000003 syscall=5 success=no exit=-13 a0=8a7d420 a1=8201 a2=0 a3=8201 items=0 ppid=4925 pid=4926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190305295.557:258): avc: denied { search } for pid=5128 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190305295.557:258): arch=40000003 syscall=33 success=no exit=-13 a0=943bc00 a1=4 a2=3a1c96c a3=9434004 items=0 ppid=5110 pid=5128 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190305297.499:259): user pid=5238 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190305353.103:260): user pid=5636 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190305354.161:261): avc: denied { search } for pid=5642 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190305354.161:261): arch=40000003 syscall=33 success=no exit=-13 a0=8814c00 a1=4 a2=3a1c96c a3=880d004 items=0 ppid=5639 pid=5642 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USER_AUTH msg=audit(1190305404.220:262): user pid=5838 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190305404.220:263): user pid=5838 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190305404.221:264): user pid=5838 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190305404.263:265): user pid=5838 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190305404.263:266): user pid=5838 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190305412.782:267): user pid=5839 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190305412.782:268): user pid=5839 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190305412.782:269): user pid=5839 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190305419.566:270): user pid=5840 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190305419.568:271): user pid=5840 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190305419.568:272): user pid=5840 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190305419.637:273): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=CRED_ACQ msg=audit(1190305430.902:274): user pid=5855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190305430.903:275): user pid=5855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190305430.903:276): user pid=5855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190305448.048:277): user pid=5859 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190305448.049:278): user pid=5859 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190305453.500:279): user pid=6134 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190307320.948:280): user pid=6628 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190307369.750:281): user pid=6936 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190307369.750:282): user pid=6936 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190307369.751:283): user pid=6936 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190307369.752:284): user pid=6936 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190307369.752:285): user pid=6936 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190307616.951:286): user pid=6978 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190307616.952:287): user pid=6978 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190307616.952:288): user pid=6978 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190307662.115:289): user pid=6989 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190308602.434:290): user pid=7385 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190308602.434:291): user pid=7385 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190308602.435:292): user pid=7385 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190308602.436:293): user pid=7385 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190308602.437:294): user pid=7385 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190308618.371:295): user pid=7388 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190308618.373:296): user pid=7388 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190308618.373:297): user pid=7388 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190308639.954:298): user pid=7392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190308639.956:299): user pid=7392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190308639.956:300): user pid=7392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190308720.215:301): user pid=7414 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190308720.215:302): user pid=7414 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190308720.216:303): user pid=7414 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190308720.224:304): user pid=7414 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190308720.224:305): user pid=7414 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190308874.770:306): user pid=7462 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190308874.770:307): user pid=7462 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190308874.770:308): user pid=7462 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190308894.118:309): user pid=7467 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190308894.119:310): user pid=7467 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190308894.119:311): user pid=7467 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190308900.060:312): user pid=7472 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190308900.062:313): user pid=7472 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190308900.062:314): user pid=7472 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190308907.867:315): user pid=7475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190308907.868:316): user pid=7475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190308907.869:317): user pid=7475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190308914.369:318): user pid=7478 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190308914.371:319): user pid=7478 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190308914.371:320): user pid=7478 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190308980.805:321): user pid=7495 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190308980.806:322): user pid=7495 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190308980.806:323): user pid=7495 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309005.311:324): user pid=7509 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309005.312:325): user pid=7509 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309005.312:326): user pid=7509 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309029.394:327): user pid=7510 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309029.394:328): user pid=7510 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309029.394:329): user pid=7510 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309066.621:330): user pid=7523 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309066.622:331): user pid=7523 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309066.622:332): user pid=7523 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309077.013:333): user pid=7527 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309077.015:334): user pid=7527 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309077.015:335): user pid=7527 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309095.435:336): user pid=7532 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309095.436:337): user pid=7532 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309095.436:338): user pid=7532 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309102.947:339): user pid=7535 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309102.948:340): user pid=7535 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309102.948:341): user pid=7535 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309129.032:342): user pid=7543 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309129.033:343): user pid=7543 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309129.033:344): user pid=7543 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309162.242:345): user pid=7547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309162.243:346): user pid=7547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309162.244:347): user pid=7547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309168.284:348): user pid=7549 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309168.286:349): user pid=7549 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309168.286:350): user pid=7549 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309185.641:351): user pid=7556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309185.643:352): user pid=7556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309185.643:353): user pid=7556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309200.936:354): user pid=7563 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309200.938:355): user pid=7563 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309200.938:356): user pid=7563 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309214.885:357): user pid=7567 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309214.886:358): user pid=7567 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309214.886:359): user pid=7567 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309231.004:360): user pid=7575 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309231.006:361): user pid=7575 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309231.006:362): user pid=7575 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309238.183:363): user pid=7578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309238.184:364): user pid=7578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309238.184:365): user pid=7578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309301.356:366): user pid=7614 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309301.357:367): user pid=7614 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309301.358:368): user pid=7614 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309345.112:369): user pid=7637 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309345.113:370): user pid=7637 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309345.113:371): user pid=7637 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309355.753:372): user pid=7641 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309355.755:373): user pid=7641 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309355.755:374): user pid=7641 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309364.210:375): user pid=7648 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309364.211:376): user pid=7648 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309364.211:377): user pid=7648 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309389.388:378): user pid=7663 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309389.389:379): user pid=7663 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309389.389:380): user pid=7663 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309407.482:381): user pid=7665 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309407.483:382): user pid=7665 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309407.484:383): user pid=7665 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309465.307:384): user pid=7693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309465.309:385): user pid=7693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309465.309:386): user pid=7693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309475.433:387): user pid=7696 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309475.434:388): user pid=7696 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309475.434:389): user pid=7696 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309491.891:390): user pid=7708 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309491.892:391): user pid=7708 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309491.892:392): user pid=7708 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309500.281:393): user pid=7713 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309500.282:394): user pid=7713 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309500.282:395): user pid=7713 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190309512.752:396): user pid=7720 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190309512.753:397): user pid=7720 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190309512.753:398): user pid=7720 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1190309526.653:399): avc: denied { getattr } for pid=7724 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190309526.653:399): arch=40000003 syscall=195 success=no exit=-13 a0=8baff78 a1=bf9ee7f8 a2=816ff4 a3=8baff78 items=0 ppid=7723 pid=7724 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1190309526.653:399): path="/var/log/pm-suspend.log" >type=AVC msg=audit(1190309526.653:400): avc: denied { write } for pid=7724 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190309526.653:400): arch=40000003 syscall=5 success=no exit=-13 a0=8baa420 a1=8241 a2=1b6 a3=8241 items=0 ppid=7723 pid=7724 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190309526.653:401): avc: denied { write } for pid=7724 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190309526.653:401): arch=40000003 syscall=5 success=no exit=-13 a0=8baa420 a1=8201 a2=0 a3=8201 items=0 ppid=7723 pid=7724 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190309540.119:402): avc: denied { search } for pid=7920 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190309540.119:402): arch=40000003 syscall=33 success=no exit=-13 a0=8c71c00 a1=4 a2=3a1c96c a3=8c6a004 items=0 ppid=7913 pid=7920 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190309542.499:403): user pid=8019 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190311527.015:404): user pid=8379 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190311527.263:405): avc: denied { search } for pid=8396 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190311527.263:405): arch=40000003 syscall=33 success=no exit=-13 a0=80a1c00 a1=4 a2=3a1c96c a3=809a004 items=0 ppid=8394 pid=8396 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USER_AUTH msg=audit(1190312547.346:406): user pid=8619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190312547.346:407): user pid=8619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190312547.347:408): user pid=8619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190312547.352:409): user pid=8619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190312547.352:410): user pid=8619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190312565.670:411): user pid=8623 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190312565.676:412): user pid=8623 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190312565.676:413): user pid=8623 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190312577.989:414): user pid=8975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190312577.991:415): user pid=8975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190312577.991:416): user pid=8975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190312585.088:417): user pid=8978 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190312585.089:418): user pid=8978 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190312585.090:419): user pid=8978 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190312614.757:420): user pid=9015 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190312614.759:421): user pid=9015 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190312614.759:422): user pid=9015 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190312631.524:423): user pid=9021 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190312631.525:424): user pid=9021 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190312631.526:425): user pid=9021 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190312643.862:426): user pid=9051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190312643.864:427): user pid=9051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190312643.864:428): user pid=9051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190312651.392:429): user pid=9058 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190312651.394:430): user pid=9058 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190312651.394:431): user pid=9058 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190314861.929:432): user pid=9306 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190318271.102:433): user pid=9607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190318271.103:434): user pid=9607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190318271.104:435): user pid=9607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190318271.108:436): user pid=9607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190318271.108:437): user pid=9607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190318461.981:438): user pid=9623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190320854.658:439): user pid=9826 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190320854.659:440): user pid=9826 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190320854.659:441): user pid=9826 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190320854.666:442): user pid=9826 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190320854.667:443): user pid=9826 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190320902.073:444): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190320902.073:444): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8f29d8 a3=6 items=0 ppid=1 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1190320907.771:445): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190320912.563:446): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190320912.563:446): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8f29d8 a3=6 items=0 ppid=1 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1190322061.829:447): user pid=10174 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190325662.423:448): user pid=10824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190326608.205:449): user pid=11197 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190326608.205:450): user pid=11197 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190326608.286:451): user pid=11197 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190326608.340:452): user pid=11197 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190326608.340:453): user pid=11197 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190327538.618:454): user pid=11423 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190327538.618:455): user pid=11423 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190327538.641:456): user pid=11423 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190328399.592:457): user pid=11490 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/sshd" (hostname=zwingli.local, addr=192.168.122.244, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1190328399.593:458): user pid=11490 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/sshd" (hostname=zwingli.local, addr=192.168.122.244, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1190328399.849:459): user pid=11490 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=zwingli.local, addr=192.168.122.244, terminal=ssh res=success)' >type=LOGIN msg=audit(1190328399.873:460): login pid=11490 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190328399.874:461): user pid=11490 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/sshd" (hostname=zwingli.local, addr=192.168.122.244, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1190328399.877:462): user pid=11494 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=zwingli.local, addr=192.168.122.244, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1190328472.688:463): user pid=11490 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=zwingli.local, addr=192.168.122.244, terminal=ssh res=success)' >type=USER_END msg=audit(1190328472.689:464): user pid=11490 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/sshd" (hostname=zwingli.local, addr=192.168.122.244, terminal=ssh res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190328561.430:465): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1190328583.279:466): user pid=11423 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190328595.149:467): user pid=11580 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190328595.150:468): user pid=11580 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190328595.150:469): user pid=11580 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190328595.157:470): user pid=11580 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190328595.157:471): user pid=11580 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1190328803.238:472): avc: denied { getattr } for pid=11765 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190328803.238:472): arch=40000003 syscall=195 success=no exit=-13 a0=9636f78 a1=bfec7cc8 a2=816ff4 a3=9636f78 items=0 ppid=11764 pid=11765 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1190328803.238:472): path="/var/log/pm-suspend.log" >type=AVC msg=audit(1190328803.328:473): avc: denied { write } for pid=11765 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190328803.328:473): arch=40000003 syscall=5 success=no exit=-13 a0=9631420 a1=8241 a2=1b6 a3=8241 items=0 ppid=11764 pid=11765 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190328803.328:474): avc: denied { write } for pid=11765 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190328803.328:474): arch=40000003 syscall=5 success=no exit=-13 a0=9631420 a1=8201 a2=0 a3=8201 items=0 ppid=11764 pid=11765 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190328809.581:475): avc: denied { search } for pid=11968 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190328809.581:475): arch=40000003 syscall=33 success=no exit=-13 a0=87eec00 a1=4 a2=3a1c96c a3=87e7004 items=0 ppid=11958 pid=11968 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190328812.499:476): user pid=11998 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190372541.871:477): user pid=12340 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190372542.008:478): avc: denied { search } for pid=12350 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190372542.008:478): arch=40000003 syscall=33 success=no exit=-13 a0=8fcfc00 a1=4 a2=3a1c96c a3=8fc8004 items=0 ppid=12348 pid=12350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USER_AUTH msg=audit(1190372600.776:479): user pid=12485 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1190372602.662:480): user pid=12485 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190372602.662:481): user pid=12485 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190372602.662:482): user pid=12485 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190372602.670:483): user pid=12485 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190372602.670:484): user pid=12485 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190372615.440:485): user pid=12829 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190372615.441:486): user pid=12829 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190372615.441:487): user pid=12829 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190376061.699:488): user pid=13400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190379661.780:489): user pid=13781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190381420.168:490): user pid=14006 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190381420.168:491): user pid=14006 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190381420.170:492): user pid=14006 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190381420.173:493): user pid=14006 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190381420.173:494): user pid=14006 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190381491.384:495): user pid=14013 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190381491.385:496): user pid=14013 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190381491.385:497): user pid=14013 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190383261.815:498): user pid=14364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190386861.850:499): user pid=15298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190390461.880:500): user pid=17105 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190390679.739:501): user pid=17142 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190390679.739:502): user pid=17142 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190390679.779:503): user pid=17142 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190390692.353:504): user pid=17142 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190390700.696:505): user pid=17188 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1190390718.104:506): user pid=17193 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190390718.104:507): user pid=17193 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190390718.105:508): user pid=17193 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190390718.108:509): user pid=17193 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190390718.108:510): user pid=17193 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190390736.508:511): user pid=17196 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190390736.510:512): user pid=17196 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190390736.510:513): user pid=17196 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190390751.290:514): user pid=17197 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190390751.296:515): user pid=17197 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190390751.296:516): user pid=17197 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190394061.913:517): user pid=17776 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190397661.947:518): user pid=18008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190401261.981:519): user pid=18240 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1190404325.732:520): avc: denied { getattr } for pid=18679 comm="pm-suspend" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190404325.732:520): arch=40000003 syscall=195 success=no exit=-13 a0=8124f78 a1=bf9d27d8 a2=816ff4 a3=8124f78 items=0 ppid=18668 pid=18679 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-suspend" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1190404325.732:520): path="/var/log/pm-suspend.log" >type=AVC msg=audit(1190404325.732:521): avc: denied { write } for pid=18679 comm="pm-suspend" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190404325.732:521): arch=40000003 syscall=5 success=no exit=-13 a0=811f428 a1=8241 a2=1b6 a3=8241 items=0 ppid=18668 pid=18679 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-suspend" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190404325.732:522): avc: denied { write } for pid=18679 comm="pm-suspend" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=user_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190404325.732:522): arch=40000003 syscall=5 success=no exit=-13 a0=811f428 a1=8201 a2=0 a3=8201 items=0 ppid=18668 pid=18679 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-suspend" exe="/bin/bash" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190404328.080:523): avc: denied { search } for pid=18848 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190404328.080:523): arch=40000003 syscall=33 success=no exit=-13 a0=9a26c00 a1=4 a2=3a1c96c a3=9a1f004 items=0 ppid=18844 pid=18848 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190404329.499:524): user pid=18905 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190404796.028:525): user pid=19250 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190404796.007:526): avc: denied { search } for pid=19260 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190404796.007:526): arch=40000003 syscall=33 success=no exit=-13 a0=9e61c00 a1=4 a2=3a1c96c a3=9e5a004 items=0 ppid=19258 pid=19260 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USER_ACCT msg=audit(1190404861.578:527): user pid=19441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1190406809.250:528): user pid=3051 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190406809.251:529): user pid=3051 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190406833.428:530): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2658 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1190406845.919:531): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2044 comm="named" sig=6 >type=DAEMON_END msg=audit(1190406848.960:5069): auditd normal halt, sending auid=4294967295 pid=20683 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1964 >type=DAEMON_START msg=audit(1190410327.348:1103): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1906 res=success, auditd pid=1906 >type=CONFIG_CHANGE msg=audit(1190410327.448:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190410327.448:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190410327.796:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190410327.796:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1190410349.814:32): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2762 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1190410351.470:33): user pid=2884 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190410370.906:34): user pid=2978 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190410370.910:35): user pid=2978 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190410370.910:36): user pid=2978 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190410370.916:37): login pid=2978 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190410370.926:38): user pid=2978 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190410370.927:39): user pid=2978 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190410475.646:40): user pid=3552 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190410480.664:41): user pid=3552 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190410480.664:42): user pid=3552 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190410480.665:43): user pid=3552 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190410480.671:44): user pid=3552 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190410480.671:45): user pid=3552 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190412061.886:46): user pid=3819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190413938.018:47): user pid=3997 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190413938.018:48): user pid=3997 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190413941.505:49): user pid=4306 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190413954.149:50): user pid=4792 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190414051.162:51): user pid=5077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190414051.162:52): user pid=5077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190414051.164:53): user pid=5077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190414051.174:54): user pid=5077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190414051.174:55): user pid=5077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1190414442.721:56): avc: denied { search } for pid=6945 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190414442.721:56): arch=40000003 syscall=195 success=no exit=-13 a0=847edf0 a1=bfc3712c a2=816ff4 a3=0 items=0 ppid=6937 pid=6945 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1190414442.721:57): avc: denied { search } for pid=6945 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190414442.721:57): arch=40000003 syscall=5 success=no exit=-13 a0=847edf0 a1=8000 a2=0 a3=8000 items=0 ppid=6937 pid=6945 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1190415011.812:58): user pid=7069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190415011.812:59): user pid=7069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190415011.872:60): user pid=7069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190415183.672:61): user pid=7092 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190415183.672:62): user pid=7092 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190415183.673:63): user pid=7092 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190415183.676:64): user pid=7092 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190415183.676:65): user pid=7092 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190415218.427:66): user pid=7106 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190415218.429:67): user pid=7106 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190415218.429:68): user pid=7106 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190415272.150:69): user pid=7069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190415661.670:70): user pid=7210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1190416266.759:71): avc: denied { getattr } for pid=23239 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190416266.759:71): arch=40000003 syscall=195 success=no exit=-13 a0=83e7f78 a1=bfc00a08 a2=816ff4 a3=83e7f78 items=0 ppid=23238 pid=23239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1190416266.759:71): path="/var/log/pm-suspend.log" >type=AVC msg=audit(1190416266.760:72): avc: denied { write } for pid=23239 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190416266.760:72): arch=40000003 syscall=5 success=no exit=-13 a0=83e2420 a1=8241 a2=1b6 a3=8241 items=0 ppid=23238 pid=23239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190416266.760:73): avc: denied { write } for pid=23239 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190416266.760:73): arch=40000003 syscall=5 success=no exit=-13 a0=83e2420 a1=8201 a2=0 a3=8201 items=0 ppid=23238 pid=23239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190416270.671:74): avc: denied { search } for pid=23851 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190416270.671:74): arch=40000003 syscall=33 success=no exit=-13 a0=9098c00 a1=4 a2=3a1c96c a3=9091004 items=0 ppid=23826 pid=23851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190416272.499:75): user pid=23979 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190445942.447:76): user pid=24693 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190445942.194:77): avc: denied { search } for pid=24724 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190445942.194:77): arch=40000003 syscall=33 success=no exit=-13 a0=9f30c00 a1=4 a2=3a1c96c a3=9f29004 items=0 ppid=24722 pid=24724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USER_AUTH msg=audit(1190445984.233:78): user pid=28592 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190445984.233:79): user pid=28592 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190445984.234:80): user pid=28592 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190445984.276:81): user pid=28592 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190445984.276:82): user pid=28592 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190446075.181:83): user pid=12628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190446075.184:84): user pid=12628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190446075.184:85): user pid=12628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190446121.891:86): user pid=12722 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190446121.892:87): user pid=12722 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190446121.936:88): user pid=12722 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190446121.942:89): user pid=12722 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190446121.942:90): user pid=12722 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190448061.532:91): user pid=12919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190451661.596:92): user pid=13352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190455261.630:93): user pid=13562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190458861.653:94): user pid=13767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190462461.679:95): user pid=13972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190466061.707:96): user pid=14181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1190468231.419:97): avc: denied { getattr } for pid=14322 comm="pm-suspend" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190468231.419:97): arch=40000003 syscall=195 success=no exit=-13 a0=9957f78 a1=bffc95d8 a2=816ff4 a3=9957f78 items=0 ppid=14318 pid=14322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-suspend" exe="/bin/bash" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1190468231.419:97): path="/var/log/pm-suspend.log" >type=AVC msg=audit(1190468231.420:98): avc: denied { write } for pid=14322 comm="pm-suspend" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190468231.420:98): arch=40000003 syscall=5 success=no exit=-13 a0=9952428 a1=8241 a2=1b6 a3=8241 items=0 ppid=14318 pid=14322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-suspend" exe="/bin/bash" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190468231.420:99): avc: denied { write } for pid=14322 comm="pm-suspend" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190468231.420:99): arch=40000003 syscall=5 success=no exit=-13 a0=9952428 a1=8201 a2=0 a3=8201 items=0 ppid=14318 pid=14322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-suspend" exe="/bin/bash" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190468233.151:100): avc: denied { search } for pid=14528 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190468233.151:100): arch=40000003 syscall=33 success=no exit=-13 a0=9293c00 a1=4 a2=3a1c96c a3=928c004 items=0 ppid=14521 pid=14528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190468235.499:101): user pid=14634 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190496241.271:102): user pid=15073 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190496241.009:103): avc: denied { search } for pid=15096 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190496241.009:103): arch=40000003 syscall=33 success=no exit=-13 a0=996ac00 a1=4 a2=3a1c96c a3=9963004 items=0 ppid=15094 pid=15096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USER_END msg=audit(1190496292.526:104): user pid=2978 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190496292.527:105): user pid=2978 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190496312.464:106): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2597 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1190496321.896:107): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1987 comm="named" sig=6 >type=DAEMON_END msg=audit(1190496324.447:1104): auditd normal halt, sending auid=4294967295 pid=16420 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1906 >type=DAEMON_START msg=audit(1190496404.671:5900): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1955 res=success, auditd pid=1955 >type=CONFIG_CHANGE msg=audit(1190496404.771:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190496404.771:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190496404.929:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190496404.929:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1190496426.695:32): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2810 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1190496428.448:33): user pid=2936 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190496442.556:34): user pid=3038 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190496442.560:35): user pid=3038 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190496442.561:36): user pid=3038 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190496442.566:37): login pid=3038 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190496442.586:38): user pid=3038 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190496442.589:39): user pid=3038 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190496749.347:40): user pid=3704 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190496749.348:41): user pid=3704 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190496749.419:42): user pid=3704 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190496788.332:43): user pid=3704 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190498134.785:44): user pid=3038 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190498134.785:45): user pid=3038 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190498138.439:46): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2646 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1190498145.573:47): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2036 comm="named" sig=6 >type=DAEMON_END msg=audit(1190498145.970:5901): auditd normal halt, sending auid=4294967295 pid=4825 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1955 >type=DAEMON_START msg=audit(1190527684.568:6602): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1909 res=success, auditd pid=1909 >type=CONFIG_CHANGE msg=audit(1190527684.669:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190527684.669:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190527684.957:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190527684.957:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1190527705.573:32): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2749 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1190527707.979:33): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190527842.543:34): user pid=2995 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190527842.546:35): user pid=2995 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190527842.547:36): user pid=2995 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190527842.553:37): login pid=2995 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190527842.574:38): user pid=2995 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190527842.575:39): user pid=2995 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190530861.931:40): user pid=3613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1190531745.299:41): avc: denied { search } for pid=4197 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190531745.299:41): arch=40000003 syscall=195 success=no exit=-13 a0=974adf0 a1=bf923e0c a2=816ff4 a3=0 items=0 ppid=4189 pid=4197 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1190531745.299:42): avc: denied { search } for pid=4197 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190531745.299:42): arch=40000003 syscall=5 success=no exit=-13 a0=974adf0 a1=8000 a2=0 a3=8000 items=0 ppid=4189 pid=4197 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1190532650.579:43): user pid=4280 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190532650.579:44): user pid=4280 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190532650.582:45): user pid=4280 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190532650.588:46): user pid=4280 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190532650.589:47): user pid=4280 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190532656.267:48): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190532656.267:48): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf964a48 a3=6 items=0 ppid=1 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1190532661.928:49): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190532677.136:50): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190532677.136:50): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf964a48 a3=6 items=0 ppid=1 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1190534462.857:51): user pid=4523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=DAEMON_START msg=audit(1190535868.311:3754): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1940 res=success, auditd pid=1940 >type=CONFIG_CHANGE msg=audit(1190535868.410:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190535868.410:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190535868.707:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190535868.707:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1190535890.149:32): user pid=2918 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1190535892.768:33): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2776 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1190535957.767:34): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1190535957.768:35): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1190535976.318:36): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1190535976.318:37): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1190535987.045:38): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190535987.047:39): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190535987.047:40): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190535987.049:41): login pid=3021 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190535987.057:42): user pid=3021 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190535987.057:43): user pid=3021 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190536412.743:44): user pid=3585 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190536412.743:45): user pid=3585 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190536412.745:46): user pid=3585 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190536412.751:47): user pid=3585 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190536412.752:48): user pid=3585 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190536417.916:49): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190536417.916:49): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfee47c8 a3=6 items=0 ppid=1 pid=2643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1190536433.518:50): dev=vnet1 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190536433.518:50): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfee47c8 a3=6 items=0 ppid=1 pid=2643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1190536464.409:51): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190536466.093:52): dev=vnet1 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1190536561.798:53): user pid=3808 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190536561.798:54): user pid=3808 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190536561.917:55): user pid=3808 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190536590.068:56): user pid=3808 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190536596.311:57): user pid=3021 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190536596.345:58): user pid=3021 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190536601.839:59): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2631 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1190536620.476:3755): auditd normal halt, sending auid=4294967295 pid=4793 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1940 >type=DAEMON_START msg=audit(1190536695.638:7503): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1916 res=success, auditd pid=1916 >type=CONFIG_CHANGE msg=audit(1190536695.738:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190536695.738:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190536696.137:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190536696.137:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1190536701.771:32): avc: denied { read write } for pid=2130 comm="hid2hci" name="001" dev=tmpfs ino=5801 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1190536701.771:32): arch=40000003 syscall=5 success=no exit=-13 a0=bfbc1fec a1=2 a2=1 a3=bfbc1fec items=0 ppid=2116 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null) >type=AVC msg=audit(1190536701.771:33): avc: denied { read } for pid=2130 comm="hid2hci" name="001" dev=tmpfs ino=5801 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1190536701.771:33): arch=40000003 syscall=5 success=no exit=-13 a0=bfbc1fec a1=0 a2=1 a3=bfbc1fec items=0 ppid=2116 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null) >type=USER_ERR msg=audit(1190536720.382:34): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190536923.297:35): user pid=2989 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190536923.301:36): user pid=2989 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190536923.302:37): user pid=2989 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190536923.307:38): login pid=2989 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190536923.328:39): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190536923.329:40): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190537407.347:41): user pid=3409 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190537407.347:42): user pid=3409 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190537407.349:43): user pid=3409 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190537407.357:44): user pid=3409 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190537407.357:45): user pid=3409 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190537416.547:46): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190537416.547:46): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffde8c8 a3=6 items=0 ppid=1 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1190538061.738:47): user pid=3498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190541661.899:48): user pid=3696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190545261.366:49): user pid=3813 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190548861.561:50): user pid=3925 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190552461.685:51): user pid=4037 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190556061.713:52): user pid=4149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190559661.749:53): user pid=4266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190563261.777:54): user pid=4378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190566861.808:55): user pid=4495 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1190569958.481:56): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=3475 comm="virt-viewer" sig=11 >type=USER_AUTH msg=audit(1190570050.992:57): user pid=4592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190570056.527:58): user pid=4592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190570056.527:59): user pid=4592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190570056.769:60): user pid=4592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190570098.595:61): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190570274.379:62): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190570274.379:62): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffde8d8 a3=6 items=0 ppid=1 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1190570462.308:63): user pid=4661 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190574061.550:64): user pid=4776 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1190574659.745:65): user pid=4592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190577662.276:66): user pid=5114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190578481.464:67): user pid=5172 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190578481.465:68): user pid=5172 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190578481.602:69): user pid=5172 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190578630.447:70): user pid=5258 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190578630.447:71): user pid=5258 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190578630.481:72): user pid=5258 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190578630.597:73): user pid=5258 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190578630.598:74): user pid=5258 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190578778.136:75): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1190578964.695:76): user pid=5172 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190579114.856:77): user pid=5486 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190579114.857:78): user pid=5486 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190579114.900:79): user pid=5486 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190579114.913:80): user pid=5486 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190579114.913:81): user pid=5486 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190579587.872:82): user pid=6986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190579587.873:83): user pid=6986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190579587.874:84): user pid=6986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190579587.876:85): user pid=6986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190579587.876:86): user pid=6986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1190580532.329:87): avc: denied { getattr } for pid=7194 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190580532.329:87): arch=40000003 syscall=195 success=no exit=-13 a0=9021f78 a1=bffa95a8 a2=816ff4 a3=9021f78 items=0 ppid=7193 pid=7194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1190580532.329:87): path="/var/log/pm-suspend.log" >type=AVC msg=audit(1190580532.354:88): avc: denied { write } for pid=7194 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190580532.354:88): arch=40000003 syscall=5 success=no exit=-13 a0=901c420 a1=8241 a2=1b6 a3=8241 items=0 ppid=7193 pid=7194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190580532.354:89): avc: denied { write } for pid=7194 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190580532.354:89): arch=40000003 syscall=5 success=no exit=-13 a0=901c420 a1=8201 a2=0 a3=8201 items=0 ppid=7193 pid=7194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190580538.299:90): avc: denied { search } for pid=7394 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190580538.299:90): arch=40000003 syscall=33 success=no exit=-13 a0=8e8bc00 a1=4 a2=3a1c96c a3=8e84004 items=0 ppid=7392 pid=7394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190580540.500:91): user pid=7488 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190581141.003:92): user pid=7962 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190581141.324:93): avc: denied { search } for pid=7982 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190581141.324:93): arch=40000003 syscall=33 success=no exit=-13 a0=88f0c00 a1=4 a2=3a1c96c a3=88e9004 items=0 ppid=7980 pid=7982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1190581142.401:94): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:bluetooth_t:s0 pid=2123 comm="hcid" sig=6 >type=USER_ACCT msg=audit(1190581261.433:95): user pid=8252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190581323.639:96): user pid=8265 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190581323.640:97): user pid=8265 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190581323.642:98): user pid=8265 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190581323.651:99): user pid=8265 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190581323.652:100): user pid=8265 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190581409.712:101): user pid=8722 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190581409.713:102): user pid=8722 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190581409.713:103): user pid=8722 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190581437.889:104): user pid=8744 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190581437.890:105): user pid=8744 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190581437.891:106): user pid=8744 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1190581840.536:107): avc: denied { getattr } for pid=8858 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190581840.536:107): arch=40000003 syscall=195 success=no exit=-13 a0=972ff78 a1=bf990f98 a2=816ff4 a3=972ff78 items=0 ppid=8856 pid=8858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1190581840.536:107): path="/var/log/pm-suspend.log" >type=AVC msg=audit(1190581840.536:108): avc: denied { write } for pid=8858 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190581840.536:108): arch=40000003 syscall=5 success=no exit=-13 a0=972a420 a1=8241 a2=1b6 a3=8241 items=0 ppid=8856 pid=8858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190581840.536:109): avc: denied { write } for pid=8858 comm="pm-hibernate" name="pm-suspend.log" dev=dm-0 ino=1274808 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1190581840.536:109): arch=40000003 syscall=5 success=no exit=-13 a0=972a420 a1=8201 a2=0 a3=8201 items=0 ppid=8856 pid=8858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pm-hibernate" exe="/bin/bash" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC msg=audit(1190581843.034:110): avc: denied { search } for pid=9043 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190581843.034:110): arch=40000003 syscall=33 success=no exit=-13 a0=8682c00 a1=4 a2=3a1c96c a3=867b004 items=0 ppid=9039 pid=9043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190581844.499:111): user pid=9102 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190583709.764:112): user pid=9427 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190583710.007:113): avc: denied { search } for pid=9436 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190583710.007:113): arch=40000003 syscall=33 success=no exit=-13 a0=8a7fc00 a1=4 a2=3a1c96c a3=8a78004 items=0 ppid=9434 pid=9436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USER_AUTH msg=audit(1190583733.709:114): user pid=9612 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190583733.709:115): user pid=9612 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190583733.710:116): user pid=9612 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190583733.714:117): user pid=9612 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190583733.714:118): user pid=9612 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190583737.148:119): user pid=9613 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190583737.149:120): user pid=9613 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190583737.150:121): user pid=9613 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190583745.339:122): user pid=9929 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190583745.340:123): user pid=9929 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190583745.340:124): user pid=9929 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190583749.627:125): user pid=9930 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190583749.629:126): user pid=9930 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190583749.629:127): user pid=9930 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190583752.908:128): user pid=9931 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190583752.910:129): user pid=9931 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190583752.910:130): user pid=9931 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190584861.210:131): user pid=10176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190586750.557:132): user pid=11558 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190586750.558:133): user pid=11558 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190586750.559:134): user pid=11558 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190586750.562:135): user pid=11558 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190586750.562:136): user pid=11558 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190586939.596:137): user pid=11620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190586939.597:138): user pid=11620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190586939.597:139): user pid=11620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190588461.490:140): user pid=11866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1190588749.862:141): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190588749.863:142): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190588771.685:143): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190588771.689:144): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190588771.690:145): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190588771.697:146): login pid=2989 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1190588771.732:147): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190588771.734:148): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190588817.287:149): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12183 comm="telepathy-idle" sig=6 >type=USER_AUTH msg=audit(1190589358.442:150): user pid=12386 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190589358.442:151): user pid=12386 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190589358.443:152): user pid=12386 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190589358.453:153): user pid=12386 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190589358.453:154): user pid=12386 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190589364.664:155): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190589364.664:155): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffde8c8 a3=6 items=0 ppid=1 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1190589674.568:156): user pid=12490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190589674.569:157): user pid=12490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190589674.646:158): user pid=12490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190589674.649:159): user pid=12490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190589674.649:160): user pid=12490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190589685.308:161): user pid=12492 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190589685.314:162): user pid=12492 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190589685.314:163): user pid=12492 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190589759.127:164): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1190589960.121:165): user pid=12663 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190589960.121:166): user pid=12663 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190589966.500:167): user pid=12898 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190612685.388:168): user pid=13246 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190613662.059:169): user pid=13548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1190616514.056:170): avc: denied { search } for pid=13985 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190616514.056:170): arch=40000003 syscall=33 success=no exit=-13 a0=9bd3c00 a1=4 a2=3a1c96c a3=9bcc004 items=0 ppid=13975 pid=13985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190616516.499:171): user pid=14039 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190616588.504:172): user pid=14385 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190616588.060:173): avc: denied { search } for pid=14408 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190616588.060:173): arch=40000003 syscall=33 success=no exit=-13 a0=8f2ac00 a1=4 a2=3a1c96c a3=8f23004 items=0 ppid=14406 pid=14408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USER_AUTH msg=audit(1190616634.535:174): user pid=14541 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190616634.535:175): user pid=14541 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190616634.536:176): user pid=14541 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190616634.544:177): user pid=14541 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190616634.544:178): user pid=14541 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190616714.695:179): user pid=14917 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190616714.696:180): user pid=14917 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190616714.696:181): user pid=14917 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1190616714.838:182): auid=500 uid=0 gid=0 subj=user_u:system_r:NetworkManager_t:s0 pid=14932 comm="NetworkManager" sig=5 >type=CRED_ACQ msg=audit(1190616742.491:183): user pid=14957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190616742.494:184): user pid=14957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190616742.494:185): user pid=14957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190616851.229:186): user pid=14962 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190616851.231:187): user pid=14962 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190616851.231:188): user pid=14962 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190616878.904:189): user pid=15155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190616878.906:190): user pid=15155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190616878.906:191): user pid=15155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190616941.648:192): user pid=15158 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190616941.649:193): user pid=15158 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190616941.649:194): user pid=15158 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190616969.774:195): user pid=15161 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190616969.775:196): user pid=15161 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190616969.775:197): user pid=15161 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190616975.518:198): user pid=15162 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190616975.519:199): user pid=15162 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190616975.519:200): user pid=15162 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190617008.248:201): user pid=15163 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190617008.249:202): user pid=15163 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190617008.249:203): user pid=15163 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190617085.622:204): user pid=15166 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190617085.623:205): user pid=15166 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190617085.623:206): user pid=15166 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190617108.954:207): user pid=15167 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190617108.956:208): user pid=15167 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190617108.956:209): user pid=15167 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190617111.808:210): user pid=15168 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190617111.809:211): user pid=15168 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190617111.809:212): user pid=15168 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190617261.626:213): user pid=15193 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190617743.143:214): user pid=16503 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190617743.143:215): user pid=16503 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190617743.143:216): user pid=16503 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190617743.148:217): user pid=16503 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190617743.148:218): user pid=16503 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190617761.462:219): user pid=16504 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190617761.463:220): user pid=16504 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190617761.463:221): user pid=16504 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190617766.794:222): user pid=16511 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190617766.795:223): user pid=16511 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190617766.795:224): user pid=16511 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190617919.444:225): user pid=16592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190617919.444:226): user pid=16592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190617923.499:227): user pid=16842 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1190619721.638:228): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=16556 comm="hald-addon-acpi" sig=11 >type=USYS_CONFIG msg=audit(1190619722.124:229): user pid=17154 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190619760.161:230): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190619760.161:231): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190619763.783:232): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2610 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1190619780.898:233): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1997 comm="named" sig=6 >type=DAEMON_END msg=audit(1190619783.964:7504): auditd normal halt, sending auid=4294967295 pid=18265 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1916 >type=DAEMON_START msg=audit(1190619879.226:828): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1904 res=success, auditd pid=1904 >type=CONFIG_CHANGE msg=audit(1190619879.326:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190619879.326:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190619879.374:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190619879.374:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1190619900.880:32): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2756 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1190619903.804:33): user pid=2884 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190619918.219:34): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190619918.220:35): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190619918.221:36): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190619918.223:37): login pid=2983 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190619918.231:38): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190619918.232:39): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190620008.098:40): user pid=3351 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190620008.098:41): user pid=3351 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190620129.333:42): user pid=3368 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190620129.333:43): user pid=3368 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190620129.334:44): user pid=3368 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190620129.337:45): user pid=3368 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190620129.337:46): user pid=3368 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190620277.786:47): user pid=3382 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190620277.787:48): user pid=3382 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190620277.787:49): user pid=3382 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190620440.870:50): user pid=3399 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190620440.871:51): user pid=3399 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190620440.872:52): user pid=3399 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190620470.639:53): user pid=3401 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190620470.641:54): user pid=3401 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190620470.641:55): user pid=3401 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190620861.456:56): user pid=7452 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190621753.879:57): user pid=7782 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190621753.879:58): user pid=7782 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190621757.500:59): user pid=8091 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190622066.128:60): user pid=8546 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190622809.274:61): user pid=8978 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190622809.274:62): user pid=8978 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190622813.500:63): user pid=9248 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190624093.783:64): user pid=9733 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190624256.184:65): user pid=10033 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190624256.184:66): user pid=10033 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190624260.500:67): user pid=10360 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190624834.344:68): user pid=10784 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190625296.620:69): user pid=11178 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190625296.620:70): user pid=11178 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190625299.501:71): user pid=11466 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190626900.615:72): user pid=11905 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190627834.229:73): avc: denied { search } for pid=16084 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190627834.229:73): arch=40000003 syscall=195 success=no exit=-13 a0=9b8edf0 a1=bfd4d23c a2=816ff4 a3=0 items=0 ppid=16076 pid=16084 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1190627834.229:74): avc: denied { search } for pid=16084 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190627834.229:74): arch=40000003 syscall=5 success=no exit=-13 a0=9b8edf0 a1=8000 a2=0 a3=8000 items=0 ppid=16076 pid=16084 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1190628061.168:75): user pid=16141 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190628139.044:76): user pid=16160 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190628139.045:77): user pid=16160 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190628139.082:78): user pid=16160 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190628139.087:79): user pid=16160 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190628139.087:80): user pid=16160 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190628281.081:81): user pid=16214 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190628281.082:82): user pid=16214 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190628281.083:83): user pid=16214 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190628285.266:84): user pid=16215 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190628285.272:85): user pid=16215 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190628285.272:86): user pid=16215 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1190629580.424:87): user pid=16779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190629580.424:88): user pid=16779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190629580.425:89): user pid=16779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190629580.430:90): user pid=16779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190629580.430:91): user pid=16779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1190629926.477:92): user pid=17000 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190629926.477:93): user pid=17000 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190629926.478:94): user pid=17000 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190629926.480:95): user pid=17000 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190629926.480:96): user pid=17000 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190629949.565:97): user pid=17002 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190629949.568:98): user pid=17002 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190629949.568:99): user pid=17002 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190631661.304:100): user pid=17908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190635261.347:101): user pid=18400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190636372.949:102): user pid=18541 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190636372.949:103): user pid=18541 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190636372.951:104): user pid=18541 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190636373.053:105): user pid=18541 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190636373.053:106): user pid=18541 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190638861.378:107): user pid=19073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190641758.704:108): user pid=19461 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190641758.704:109): user pid=19461 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190641758.705:110): user pid=19461 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190641758.711:111): user pid=19461 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190641758.711:112): user pid=19461 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190642461.415:113): user pid=19601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190642748.384:114): user pid=19672 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190642748.384:115): user pid=19672 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190642748.672:116): user pid=19672 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190643021.780:117): user pid=19672 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190644100.244:118): user pid=19869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190644100.244:119): user pid=19869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190644100.354:120): user pid=19869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190644148.388:121): user pid=19869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190645910.364:122): user pid=20128 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190645910.365:123): user pid=20128 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190645915.500:124): user pid=20444 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190646389.764:125): user pid=20969 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190647232.971:126): user pid=21261 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190647232.971:127): user pid=21261 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190647237.500:128): user pid=21544 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190653186.707:129): user pid=22029 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190653261.607:130): user pid=22306 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190656861.691:131): user pid=22742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190657954.894:132): user pid=22963 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190657954.894:133): user pid=22963 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190657954.929:134): user pid=22963 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190657954.938:135): user pid=22963 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190657954.938:136): user pid=22963 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190657961.412:137): user pid=22996 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190657961.413:138): user pid=22996 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190657961.414:139): user pid=22996 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190657966.146:140): user pid=23029 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190657966.148:141): user pid=23029 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190657966.148:142): user pid=23029 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190658007.946:143): user pid=23067 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190658007.947:144): user pid=23067 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190658007.947:145): user pid=23067 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190658135.987:146): user pid=23146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190658135.987:147): user pid=23146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190658135.988:148): user pid=23146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190658135.989:149): user pid=23146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190658135.989:150): user pid=23146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190658158.061:151): user pid=23193 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190658158.062:152): user pid=23193 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190658158.062:153): user pid=23193 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190658167.431:154): user pid=23406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190658167.432:155): user pid=23406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190658167.433:156): user pid=23406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190658418.956:157): user pid=23533 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190658418.958:158): user pid=23533 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190658418.958:159): user pid=23533 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190658429.364:160): user pid=23534 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190658429.366:161): user pid=23534 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190658429.366:162): user pid=23534 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_ABEND msg=audit(1190659630.512:163): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=23580 comm="hald-addon-acpi" sig=11 >type=USER_ACCT msg=audit(1190660461.730:164): user pid=24134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190662269.317:165): user pid=24716 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190662269.317:166): user pid=24716 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190662269.391:167): user pid=24716 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190662423.477:168): user pid=24716 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190662429.569:169): user pid=24762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190662429.570:170): user pid=24762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190662429.628:171): user pid=24762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190662550.385:172): user pid=24762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190662561.369:173): user pid=24776 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190662561.369:174): user pid=24776 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190662561.400:175): user pid=24776 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190662561.403:176): user pid=24776 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190662561.403:177): user pid=24776 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190662588.792:178): user pid=24779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190662588.799:179): user pid=24779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190662588.799:180): user pid=24779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1190662669.920:181): user pid=24836 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190662669.921:182): user pid=24836 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190662669.927:183): user pid=24836 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190662836.761:184): user pid=24836 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190663131.966:185): user pid=25037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190663131.966:186): user pid=25037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190663131.983:187): user pid=25037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190663366.910:188): user pid=25037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190664062.068:189): user pid=25222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190664930.551:190): user pid=25354 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190664930.552:191): user pid=25354 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190664930.584:192): user pid=25354 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190664930.587:193): user pid=25354 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190664930.587:194): user pid=25354 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190665925.843:195): user pid=29883 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190665925.843:196): user pid=29883 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190665925.844:197): user pid=29883 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190665925.845:198): user pid=29883 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190665925.845:199): user pid=29883 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190665942.159:200): user pid=29886 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190665942.164:201): user pid=29886 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190665942.164:202): user pid=29886 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190666348.607:203): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190666348.609:204): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190666366.624:205): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190666366.625:206): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190666366.625:207): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190666366.633:208): login pid=2983 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1190666366.687:209): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190666366.688:210): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190667661.235:211): user pid=30613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190667909.092:212): user pid=30653 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190667909.093:213): user pid=30653 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190667909.094:214): user pid=30653 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190667909.098:215): user pid=30653 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190667909.098:216): user pid=30653 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190667949.024:217): user pid=30683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190667949.025:218): user pid=30683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190667949.025:219): user pid=30683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190669979.094:220): user pid=30966 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190669979.094:221): user pid=30966 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190669979.155:222): user pid=30966 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190669993.232:223): user pid=30978 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190669993.232:224): user pid=30978 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190669993.281:225): user pid=30978 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190670002.600:226): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190670002.600:226): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfa58348 a3=6 items=0 ppid=1 pid=2609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1190670008.132:227): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190670016.886:228): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190670016.886:228): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfa58348 a3=6 items=0 ppid=1 pid=2609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1190670217.863:229): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1190670222.557:230): user pid=30978 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190670329.687:231): user pid=30966 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190671261.311:232): user pid=1085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1190671649.575:233): avc: denied { search } for pid=1422 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190671649.575:233): arch=40000003 syscall=33 success=no exit=-13 a0=a008c00 a1=4 a2=3a1c96c a3=a001004 items=0 ppid=1396 pid=1422 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190671652.499:234): user pid=1620 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190698937.511:235): user pid=1953 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190698938.137:236): avc: denied { search } for pid=2019 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190698938.137:236): arch=40000003 syscall=33 success=no exit=-13 a0=823cc00 a1=4 a2=3a1c96c a3=8235004 items=0 ppid=2017 pid=2019 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USER_ACCT msg=audit(1190700061.518:237): user pid=2390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190703661.579:238): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190703708.759:239): user pid=2839 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190703708.759:240): user pid=2839 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190703708.857:241): user pid=2839 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190703748.294:242): user pid=2839 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190706675.970:243): avc: denied { search } for pid=4009 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190706675.970:243): arch=40000003 syscall=33 success=no exit=-13 a0=8dbbc00 a1=4 a2=3a1c96c a3=8db4004 items=0 ppid=4004 pid=4009 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190706678.499:244): user pid=4122 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190711491.147:245): user pid=4569 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190711491.122:246): avc: denied { search } for pid=4600 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190711491.122:246): arch=40000003 syscall=33 success=no exit=-13 a0=83bfc00 a1=4 a2=3a1c96c a3=83b8004 items=0 ppid=4598 pid=4600 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=user_u:system_r:alsa_t:s0 key=(null) >type=USER_AUTH msg=audit(1190711568.098:247): user pid=4888 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190711568.098:248): user pid=4888 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190711568.100:249): user pid=4888 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190711568.109:250): user pid=4888 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190711568.109:251): user pid=4888 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190711595.662:252): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190711595.662:253): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190711612.418:254): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190711612.422:255): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190711612.422:256): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190711612.428:257): login pid=2983 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1190711612.480:258): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190711612.481:259): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190711792.815:260): user pid=5387 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190711792.815:261): user pid=5387 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190711792.816:262): user pid=5387 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190711792.827:263): user pid=5387 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190711792.827:264): user pid=5387 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190713440.678:265): user pid=6162 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190713440.678:266): user pid=6162 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190713444.499:267): user pid=6388 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1190721869.548:9477): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1871 res=success, auditd pid=1871 >type=CONFIG_CHANGE msg=audit(1190721869.648:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190721869.648:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190721869.815:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190721869.815:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1190721890.459:32): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2704 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1190721892.069:33): user pid=2849 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190721905.641:34): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190721905.645:35): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190721905.646:36): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190721905.651:37): login pid=2947 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190721905.666:38): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190721905.666:39): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190723068.082:40): user pid=3487 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190723068.082:41): user pid=3487 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190723068.083:42): user pid=3487 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190723068.090:43): user pid=3487 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190723068.091:44): user pid=3487 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190723144.152:45): user pid=3573 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190723144.152:46): user pid=3573 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190723147.499:47): user pid=3771 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190723813.884:48): user pid=4127 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1190725085.816:49): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=4781 comm="update-mime-dat" sig=6 >type=USER_ACCT msg=audit(1190725261.782:50): user pid=4844 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190725893.818:51): user pid=5058 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190725893.818:52): user pid=5058 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190725893.819:53): user pid=5058 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190725893.826:54): user pid=5058 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190725893.826:55): user pid=5058 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_AUTH msg=audit(1190726330.233:56): user pid=5188 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190726333.772:57): user pid=5188 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190726463.264:58): user pid=5424 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=failed)' >type=USER_AUTH msg=audit(1190726466.145:59): user pid=5424 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1190726466.145:60): user pid=5424 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_ACQ msg=audit(1190726466.146:61): user pid=5424 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1190726466.154:62): user pid=5424 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1190726466.154:63): user pid=5424 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=AVC msg=audit(1190726633.950:64): avc: denied { search } for pid=6039 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190726633.950:64): arch=40000003 syscall=195 success=no exit=-13 a0=9d95df0 a1=bfbf968c a2=816ff4 a3=0 items=0 ppid=6031 pid=6039 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1190726633.950:65): avc: denied { search } for pid=6039 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190726633.950:65): arch=40000003 syscall=5 success=no exit=-13 a0=9d95df0 a1=8000 a2=0 a3=8000 items=0 ppid=6031 pid=6039 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1190728500.170:66): user pid=8022 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190728500.170:67): user pid=8022 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190728500.205:68): user pid=8022 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190728500.211:69): user pid=8022 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190728500.211:70): user pid=8022 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190728551.648:71): user pid=8273 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190728551.650:72): user pid=8273 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190728551.651:73): user pid=8273 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190728861.929:74): user pid=8412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190729406.017:75): user pid=8517 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190729406.017:76): user pid=8517 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190729406.018:77): user pid=8517 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190729406.020:78): user pid=8517 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190729406.020:79): user pid=8517 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190729422.479:80): user pid=8530 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190729422.481:81): user pid=8530 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190729422.481:82): user pid=8530 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190729427.506:83): user pid=8536 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190729427.507:84): user pid=8536 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190729427.507:85): user pid=8536 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190729431.791:86): user pid=8730 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190729431.793:87): user pid=8730 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190729431.793:88): user pid=8730 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190729478.895:89): user pid=8753 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190729478.897:90): user pid=8753 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190729478.897:91): user pid=8753 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_LOGIN msg=audit(1190729797.046:92): user pid=8884 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=kasal: exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.5, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1190729798.816:93): user pid=8887 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=failed)' >type=USER_AUTH msg=audit(1190729800.329:94): user pid=8884 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=? : exe="/usr/sbin/sshd" (hostname=camelia.local, addr=10.0.0.5, terminal=ssh res=failed)' >type=USER_LOGIN msg=audit(1190729800.329:95): user pid=8884 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=kasal: exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.5, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1190729801.023:96): user pid=8887 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190729801.023:97): user pid=8887 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190729801.024:98): user pid=8887 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190729801.025:99): user pid=8887 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190729801.025:100): user pid=8887 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_LOGIN msg=audit(1190729807.256:101): user pid=8893 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=matej: exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.5, terminal=sshd res=failed)' >type=USER_ACCT msg=audit(1190729807.305:102): user pid=8893 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/sshd" (hostname=camelia.local, addr=10.0.0.5, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1190729807.521:103): user pid=8893 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=camelia.local, addr=10.0.0.5, terminal=ssh res=success)' >type=LOGIN msg=audit(1190729807.525:104): login pid=8893 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190729807.526:105): user pid=8893 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/sshd" (hostname=camelia.local, addr=10.0.0.5, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1190729807.528:106): user pid=8895 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=camelia.local, addr=10.0.0.5, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1190729807.561:107): user pid=8893 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=camelia.local, addr=10.0.0.5, terminal=/dev/pts/5 res=success)' >type=CRED_ACQ msg=audit(1190729821.973:108): user pid=8933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190729821.974:109): user pid=8933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190729821.974:110): user pid=8933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_DISP msg=audit(1190730132.162:111): user pid=8893 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=camelia.local, addr=10.0.0.5, terminal=ssh res=success)' >type=USER_END msg=audit(1190730132.163:112): user pid=8893 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/sshd" (hostname=camelia.local, addr=10.0.0.5, terminal=ssh res=success)' >type=USER_END msg=audit(1190730541.537:113): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190730541.537:114): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190730554.280:115): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190730554.283:116): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190730554.284:117): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190730554.292:118): login pid=2947 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1190730554.343:119): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190730554.344:120): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190732461.996:121): user pid=9863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190734094.972:122): user pid=10108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190734094.972:123): user pid=10108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190734094.973:124): user pid=10108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190734094.982:125): user pid=10108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190734094.982:126): user pid=10108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190734100.539:127): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190734100.539:127): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb9b488 a3=6 items=0 ppid=1 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1190734104.886:128): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1190734138.812:129): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190734138.812:129): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb9b488 a3=6 items=0 ppid=1 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1190735183.625:130): user pid=12638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1190735183.625:131): user pid=12638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=CRED_ACQ msg=audit(1190735183.730:132): user pid=12638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1190735183.746:133): user pid=12638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1190735183.746:134): user pid=12638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190736003.871:135): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_ACCT msg=audit(1190736062.461:136): user pid=13471 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190736214.617:137): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190736214.617:137): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb9b488 a3=6 items=0 ppid=1 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1190737515.216:138): user pid=13721 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190737515.216:139): user pid=13721 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190737515.513:140): user pid=13721 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190737599.347:141): user pid=13721 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190737844.385:142): user pid=13829 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190737844.385:143): user pid=13829 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USYS_CONFIG msg=audit(1190737852.499:144): user pid=14027 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190738994.146:145): user pid=14353 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190739414.393:146): user pid=14632 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190739414.393:147): user pid=14632 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190739414.435:148): user pid=14632 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190739414.463:149): user pid=14632 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190739414.463:150): user pid=14632 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190739650.056:151): user pid=14760 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190739650.061:152): user pid=14760 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190739650.061:153): user pid=14760 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190739661.978:154): user pid=14790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190740202.269:155): user pid=15023 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190740202.269:156): user pid=15023 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USYS_CONFIG msg=audit(1190740208.500:157): user pid=15206 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190745821.225:158): user pid=15459 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190746580.968:159): user pid=15841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190746580.968:160): user pid=15841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190746581.014:161): user pid=15841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190746581.024:162): user pid=15841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190746581.024:163): user pid=15841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190746784.284:164): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190746784.284:165): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190746788.839:166): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2565 comm="dhcdbd" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1190746789.279:167): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_ABEND msg=audit(1190746803.767:168): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1952 comm="named" sig=6 >type=DAEMON_END msg=audit(1190746806.649:9478): auditd normal halt, sending auid=4294967295 pid=17387 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1871 >type=DAEMON_START msg=audit(1190748335.422:5405): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1833 res=success, auditd pid=1833 >type=CONFIG_CHANGE msg=audit(1190748335.522:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190748335.522:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190748335.907:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190748335.907:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1190748358.408:32): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2676 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1190748360.537:33): user pid=2813 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190748381.879:34): user pid=2908 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190748381.882:35): user pid=2908 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190748381.883:36): user pid=2908 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190748381.889:37): login pid=2908 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190748381.908:38): user pid=2908 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190748381.910:39): user pid=2908 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190748439.954:40): user pid=3289 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190748442.439:41): user pid=3289 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190748442.439:42): user pid=3289 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190748442.440:43): user pid=3289 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190748442.446:44): user pid=3289 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190748442.447:45): user pid=3289 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190750461.381:46): user pid=4120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190754061.666:47): user pid=13250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190757661.766:48): user pid=13506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190757706.900:49): user pid=13510 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190757706.900:50): user pid=13510 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190757706.931:51): user pid=13510 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190757706.934:52): user pid=13510 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190757706.934:53): user pid=13510 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190757949.592:54): user pid=13530 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190757949.594:55): user pid=13530 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190757949.595:56): user pid=13530 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190757959.795:57): user pid=13531 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190757959.796:58): user pid=13531 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190757959.796:59): user pid=13531 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1190758448.647:60): user pid=14191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190758448.648:61): user pid=14191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190758448.671:62): user pid=14191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190758448.678:63): user pid=14191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190758448.678:64): user pid=14191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1190759561.522:65): user pid=18332 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190759566.825:66): user pid=18334 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190759566.826:67): user pid=18334 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190759566.826:68): user pid=18334 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190759566.828:69): user pid=18334 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190759566.828:70): user pid=18334 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190759625.995:71): user pid=18350 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190759625.997:72): user pid=18350 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190759625.997:73): user pid=18350 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190761261.807:74): user pid=18666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190764861.836:75): user pid=18963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1190765174.035:76): avc: denied { search } for pid=19198 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190765174.035:76): arch=40000003 syscall=33 success=no exit=-13 a0=8e3bc00 a1=4 a2=3a1c96c a3=8e34004 items=0 ppid=19192 pid=19198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1190765176.500:77): user pid=19335 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190785332.957:78): user pid=19609 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1190785333.220:79): avc: denied { search } for pid=19645 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190785333.220:79): arch=40000003 syscall=33 success=no exit=-13 a0=8f12c00 a1=4 a2=3a1c96c a3=8f0b004 items=0 ppid=19643 pid=19645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USER_AUTH msg=audit(1190786115.831:80): user pid=19898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190786115.831:81): user pid=19898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190786115.857:82): user pid=19898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190786115.863:83): user pid=19898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190786115.863:84): user pid=19898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190786121.596:85): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190786121.596:85): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb40428 a3=6 items=0 ppid=1 pid=2541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1190786462.373:86): user pid=19996 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190787788.629:87): user pid=20244 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190787788.629:88): user pid=20244 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1190787788.728:89): user pid=20244 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190787788.781:90): user pid=20244 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190787788.781:91): user pid=20244 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_AUTH msg=audit(1190787874.390:92): user pid=20344 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1190787874.390:93): user pid=20344 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190787874.516:94): user pid=20344 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190787889.701:95): user pid=20344 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1190787964.440:96): user pid=20358 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1190787964.444:97): user pid=20358 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1190787964.444:98): user pid=20358 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190788010.387:99): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1190788254.803:100): user pid=20419 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1190788257.427:101): user pid=20419 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190788257.427:102): user pid=20419 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190788257.428:103): user pid=20419 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190788257.434:104): user pid=20419 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190788257.434:105): user pid=20419 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1190788265.850:106): user pid=20452 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190788265.850:107): user pid=20452 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190788265.934:108): user pid=20452 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190788278.300:109): user pid=20452 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190789724.143:110): user pid=20635 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190789724.144:111): user pid=20635 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190789724.146:112): user pid=20635 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190789724.153:113): user pid=20635 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190789724.153:114): user pid=20635 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190789892.046:115): user pid=20711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190789892.054:116): user pid=20711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190789892.054:117): user pid=20711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190790061.699:118): user pid=20755 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1190791748.699:119): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1190791748.699:119): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb40428 a3=6 items=0 ppid=1 pid=2541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1190792182.233:120): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=21026 comm="virt-viewer" sig=11 >type=ANOM_PROMISCUOUS msg=audit(1190792286.130:121): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1190792992.438:122): user pid=21178 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190792992.438:123): user pid=21178 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USYS_CONFIG msg=audit(1190792998.500:124): user pid=21422 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190793595.767:125): user pid=21749 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190793624.126:126): user pid=2908 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190793624.142:127): user pid=2908 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190793629.749:128): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2529 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1190793644.746:129): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1914 comm="named" sig=6 >type=DAEMON_END msg=audit(1190793648.060:5406): auditd normal halt, sending auid=4294967295 pid=22976 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1833 >type=DAEMON_START msg=audit(1190793801.875:7432): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2041 res=success, auditd pid=2041 >type=CONFIG_CHANGE msg=audit(1190793801.974:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190793801.974:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190793802.005:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190793802.005:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1190793824.039:32): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2872 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1190793825.613:33): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190793849.101:34): user pid=3112 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190793849.105:35): user pid=3112 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190793849.105:36): user pid=3112 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190793849.111:37): login pid=3112 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190793849.121:38): user pid=3112 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190793849.121:39): user pid=3112 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190794726.442:40): user pid=3629 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190794726.442:41): user pid=3629 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190794730.500:42): user pid=3950 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190795300.172:43): user pid=4396 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190796131.356:44): user pid=4854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190796132.678:45): user pid=4854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190796132.679:46): user pid=4854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190796132.680:47): user pid=4854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190796132.685:48): user pid=4854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190796132.685:49): user pid=4854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190797261.927:50): user pid=5900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190797803.304:51): user pid=6316 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190797803.304:52): user pid=6316 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190797803.376:53): user pid=6316 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190797803.403:54): user pid=6316 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190797803.403:55): user pid=6316 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1190798505.339:56): avc: denied { search } for pid=7123 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190798505.339:56): arch=40000003 syscall=195 success=no exit=-13 a0=957cdf0 a1=bf89ed8c a2=816ff4 a3=0 items=0 ppid=7120 pid=7123 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1190798505.339:57): avc: denied { search } for pid=7123 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190798505.339:57): arch=40000003 syscall=5 success=no exit=-13 a0=957cdf0 a1=8000 a2=0 a3=8000 items=0 ppid=7120 pid=7123 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1190800861.270:58): user pid=7348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190804461.553:59): user pid=28991 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190806347.937:60): user pid=14384 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190806347.937:61): user pid=14384 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190806348.057:62): user pid=14384 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190806348.059:63): user pid=14384 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190806348.059:64): user pid=14384 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190807546.459:65): user pid=23540 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190807546.459:66): user pid=23540 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190807546.523:67): user pid=23540 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190807546.550:68): user pid=23540 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190807546.550:69): user pid=23540 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1190807550.386:70): user pid=23571 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190807550.386:71): user pid=23571 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190807550.489:72): user pid=23571 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190807623.796:73): user pid=23571 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190807882.548:74): user pid=23651 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190807882.548:75): user pid=23651 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190807882.549:76): user pid=23651 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190807882.553:77): user pid=23651 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190807882.553:78): user pid=23651 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190808061.821:79): user pid=23679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190811662.008:80): user pid=25205 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190812800.997:81): user pid=28239 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190812800.997:82): user pid=28239 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190812800.998:83): user pid=28239 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190812801.001:84): user pid=28239 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190812801.001:85): user pid=28239 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190813629.821:86): user pid=29787 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190813629.822:87): user pid=29787 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190813629.822:88): user pid=29787 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190813629.824:89): user pid=29787 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190813629.824:90): user pid=29787 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190813782.595:91): user pid=30643 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190813782.596:92): user pid=30643 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190813782.596:93): user pid=30643 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190814433.595:94): user pid=30982 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190814433.595:95): user pid=30982 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190814433.596:96): user pid=30982 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190814433.599:97): user pid=30982 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190814433.599:98): user pid=30982 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190814572.051:99): user pid=31037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190814572.051:100): user pid=31037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190814572.211:101): user pid=31037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190815261.230:102): user pid=31855 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1190815576.551:103): user pid=31037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1190815880.262:104): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=32376 comm="telepathy-idle" sig=6 >type=USER_AUTH msg=audit(1190817614.336:105): user pid=484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1190817618.232:106): user pid=484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190817618.233:107): user pid=484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190817618.233:108): user pid=484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190817618.286:109): user pid=484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190817618.286:110): user pid=484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190818861.346:111): user pid=1267 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190819964.349:112): user pid=1520 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190819964.349:113): user pid=1520 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190819964.360:114): user pid=1520 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1190820616.211:115): user pid=3181 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=backuppc exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=MAC_POLICY_LOAD msg=audit(1190820623.878:116): policy loaded auid=500 >type=SYSCALL msg=audit(1190820623.878:116): arch=40000003 syscall=4 success=yes exit=1593070 a0=4 a1=b7dd8000 a2=184eee a3=bfa417a8 items=0 ppid=3185 pid=3186 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_AVC msg=audit(1190820623.935:117): user pid=2235 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1190820640.427:118): user pid=2235 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1190820640.374:119): policy loaded auid=500 >type=SYSCALL msg=audit(1190820640.374:119): arch=40000003 syscall=4 success=yes exit=1603090 a0=4 a1=b7da3000 a2=187612 a3=bfb9f108 items=0 ppid=3244 pid=3245 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_END msg=audit(1190820686.029:120): user pid=1520 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190821030.531:121): user pid=3519 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190821030.531:122): user pid=3519 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USYS_CONFIG msg=audit(1190821035.500:123): user pid=3841 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1190821224.578:9623): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2038 res=success, auditd pid=2038 >type=CONFIG_CHANGE msg=audit(1190821224.678:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190821224.678:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190821224.741:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190821224.741:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1190821246.026:32): user pid=3015 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1190821248.700:33): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2871 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1190821268.987:34): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190821268.991:35): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190821268.991:36): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190821268.997:37): login pid=3110 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190821269.007:38): user pid=3110 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190821269.008:39): user pid=3110 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1190821361.043:40): user pid=3545 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190821361.044:41): user pid=3545 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1190821364.500:42): user pid=3874 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190821498.993:43): user pid=4304 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190822462.037:44): user pid=4645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190822514.647:45): user pid=4682 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190822514.647:46): user pid=4682 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USYS_CONFIG msg=audit(1190822518.500:47): user pid=4954 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190829926.000:48): user pid=5472 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1190830056.970:49): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=5730 comm="telepathy-idle" sig=6 >type=USER_ACCT msg=audit(1190833261.617:50): user pid=6203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AVC msg=audit(1190834460.804:51): user pid=2232 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.Avahi.Server member=GetAPIVersion dest=org.freedesktop.Avahi spid=6478 tpid=2819 scontext=user_u:system_r:unconfined_execmem_t:s0 tcontext=system_u:system_r:avahi_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1190834460.812:52): user pid=2232 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.Avahi.Server member=GetAPIVersion dest=org.freedesktop.Avahi spid=6478 tpid=2819 scontext=user_u:system_r:unconfined_execmem_t:s0 tcontext=system_u:system_r:avahi_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1190834460.819:53): user pid=2232 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.Avahi.Server member=GetAPIVersion dest=org.freedesktop.Avahi spid=6478 tpid=2819 scontext=user_u:system_r:unconfined_execmem_t:s0 tcontext=system_u:system_r:avahi_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1190834460.826:54): user pid=2232 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.Avahi.Server member=GetAPIVersion dest=org.freedesktop.Avahi spid=6478 tpid=2819 scontext=user_u:system_r:unconfined_execmem_t:s0 tcontext=system_u:system_r:avahi_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1190834460.831:55): user pid=2232 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.Avahi.Server member=GetAPIVersion dest=org.freedesktop.Avahi spid=6478 tpid=2819 scontext=user_u:system_r:unconfined_execmem_t:s0 tcontext=system_u:system_r:avahi_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AUTH msg=audit(1190835179.079:56): user pid=6773 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190835179.079:57): user pid=6773 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190835179.109:58): user pid=6773 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190835179.114:59): user pid=6773 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190835179.114:60): user pid=6773 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190835233.810:61): user pid=6785 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190835233.812:62): user pid=6785 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190835233.812:63): user pid=6785 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190836861.660:64): user pid=7266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190837163.514:65): user pid=7373 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190837163.515:66): user pid=7373 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190837163.516:67): user pid=7373 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190837163.524:68): user pid=7373 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190837163.524:69): user pid=7373 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190837290.818:70): user pid=7484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190837290.821:71): user pid=7484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190837290.821:72): user pid=7484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190837339.360:73): user pid=7527 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190837339.368:74): user pid=7527 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190837339.368:75): user pid=7527 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1190838006.554:76): user pid=7674 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190838006.554:77): user pid=7674 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190838006.555:78): user pid=7674 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190838006.559:79): user pid=7674 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190838006.559:80): user pid=7674 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190838613.004:81): user pid=7740 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190838613.004:82): user pid=7740 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190838613.005:83): user pid=7740 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190838613.012:84): user pid=7740 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190838613.012:85): user pid=7740 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190840461.725:86): user pid=8250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1190840882.615:87): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=8311 comm="print" sig=11 >type=ANOM_ABEND msg=audit(1190840937.093:88): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=8351 comm="print" sig=11 >type=USER_AUTH msg=audit(1190840947.488:89): user pid=8354 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=ANOM_ABEND msg=audit(1190840979.822:90): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=8367 comm="print" sig=11 >type=USER_AUTH msg=audit(1190841067.711:91): user pid=8391 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1190841072.075:92): user pid=8391 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1190841073.900:93): user pid=8391 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190841073.901:94): user pid=8391 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190841073.901:95): user pid=8391 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190841073.909:96): user pid=8391 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190841073.909:97): user pid=8391 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1190843312.428:98): user pid=8782 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190843312.428:99): user pid=8782 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190843312.429:100): user pid=8782 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190843312.433:101): user pid=8782 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190843312.434:102): user pid=8782 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190843333.171:103): user pid=8785 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190843333.173:104): user pid=8785 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190843333.173:105): user pid=8785 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190844061.815:106): user pid=8866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190846718.713:107): user pid=9411 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1190846720.693:108): user pid=9411 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190846720.693:109): user pid=9411 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190846720.694:110): user pid=9411 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190846720.696:111): user pid=9411 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190846720.696:112): user pid=9411 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190847661.856:113): user pid=9908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190848303.633:114): user pid=10265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190848303.633:115): user pid=10265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USYS_CONFIG msg=audit(1190848308.500:116): user pid=10712 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1190871407.995:117): user pid=11085 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190872861.837:118): user pid=11404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190876461.868:119): user pid=11684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190880061.905:120): user pid=11840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190883661.934:121): user pid=11952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190887261.957:122): user pid=12064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190890861.982:123): user pid=12182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190894461.008:124): user pid=12294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190898061.035:125): user pid=12406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190901661.063:126): user pid=12520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190905261.090:127): user pid=12637 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190908861.119:128): user pid=12751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190912461.146:129): user pid=12863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190916061.174:130): user pid=12980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190918436.496:131): user pid=13182 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190918436.496:132): user pid=13182 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190918436.561:133): user pid=13182 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190918594.938:134): user pid=13182 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190919661.207:135): user pid=13420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190923261.246:136): user pid=13601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190925652.950:137): user pid=13888 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190925656.794:138): user pid=13888 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190925656.794:139): user pid=13888 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190925656.807:140): user pid=13888 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190926000.624:141): user pid=13888 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190926306.078:142): user pid=3110 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190926306.096:143): user pid=3110 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190926310.831:144): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2728 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1190926320.941:145): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2118 comm="named" sig=6 >type=DAEMON_END msg=audit(1190926323.484:9624): auditd normal halt, sending auid=4294967295 pid=16283 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2038 >type=DAEMON_START msg=audit(1190926609.119:5645): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2038 res=success, auditd pid=2038 >type=CONFIG_CHANGE msg=audit(1190926609.218:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190926609.218:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190926609.249:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190926609.249:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1190926631.678:32): user pid=3015 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190926646.083:33): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190926646.086:34): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190926646.087:35): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190926646.093:36): login pid=3110 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190926646.112:37): user pid=3110 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190926646.114:38): user pid=3110 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190926674.330:39): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2888 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1190926738.628:40): user pid=3557 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190926738.629:41): user pid=3557 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190926738.630:42): user pid=3557 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190926738.638:43): user pid=3557 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190926738.638:44): user pid=3557 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190926861.226:45): user pid=3664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190927036.858:46): user pid=22905 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1190927036.858:47): user pid=22905 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1190927036.859:48): user pid=22905 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1190927036.862:49): user pid=22905 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1190927036.862:50): user pid=22905 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1190928098.580:51): user pid=23086 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190928098.580:52): user pid=23086 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190928098.581:53): user pid=23086 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190928098.586:54): user pid=23086 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190928098.586:55): user pid=23086 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190928652.932:56): user pid=23179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190928652.932:57): user pid=23179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190928652.933:58): user pid=23179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190928652.934:59): user pid=23179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190928652.934:60): user pid=23179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190928733.418:61): user pid=23188 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190928733.419:62): user pid=23188 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190928733.419:63): user pid=23188 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190930461.295:64): user pid=23377 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1190930764.170:65): avc: denied { search } for pid=25792 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190930764.170:65): arch=40000003 syscall=195 success=no exit=-13 a0=8b35df0 a1=bfd653cc a2=816ff4 a3=0 items=0 ppid=25784 pid=25792 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1190930764.170:66): avc: denied { search } for pid=25792 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190930764.170:66): arch=40000003 syscall=5 success=no exit=-13 a0=8b35df0 a1=8000 a2=0 a3=8000 items=0 ppid=25784 pid=25792 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1190933298.428:67): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=26364 comm="telepathy-idle" sig=6 >type=USER_AUTH msg=audit(1190933303.351:68): user pid=26368 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190933303.351:69): user pid=26368 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190933303.408:70): user pid=26368 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190933437.695:71): user pid=26368 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190933488.014:72): user pid=27874 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190933488.015:73): user pid=27874 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190933488.045:74): user pid=27874 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190933488.049:75): user pid=27874 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190933488.049:76): user pid=27874 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190933509.451:77): user pid=27878 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190933509.453:78): user pid=27878 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190933509.453:79): user pid=27878 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190933524.438:80): user pid=27879 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190933524.440:81): user pid=27879 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190933524.440:82): user pid=27879 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190933581.315:83): user pid=28051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190933581.316:84): user pid=28051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190933581.316:85): user pid=28051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190933598.478:86): user pid=28052 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190933598.479:87): user pid=28052 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190933598.479:88): user pid=28052 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190933613.549:89): user pid=28056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190933613.551:90): user pid=28056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190933613.551:91): user pid=28056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190933630.718:92): user pid=28084 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190933630.719:93): user pid=28084 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190933630.719:94): user pid=28084 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AVC msg=audit(1190933637.674:95): user pid=2232 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Introspectable member=Introspect dest=:1.8 spid=28103 tpid=2909 scontext=user_u:system_r:rpm_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1190933637.677:96): user pid=2232 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call member=state dest=:1.8 spid=28103 tpid=2909 scontext=user_u:system_r:rpm_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AUTH msg=audit(1190933650.656:97): user pid=28107 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190933650.656:98): user pid=28107 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190933650.671:99): user pid=28107 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AVC msg=audit(1190933660.335:100): user pid=2232 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Introspectable member=Introspect dest=:1.8 spid=28103 tpid=2909 scontext=user_u:system_r:rpm_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1190933660.336:101): user pid=2232 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call member=state dest=:1.8 spid=28103 tpid=2909 scontext=user_u:system_r:rpm_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_END msg=audit(1190933660.429:102): user pid=28107 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190933663.487:103): user pid=28118 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190933663.488:104): user pid=28118 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190933663.534:105): user pid=28118 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190933683.732:106): user pid=28129 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190933683.732:107): user pid=28129 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190933683.739:108): user pid=28129 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AVC msg=audit(1190933705.558:109): user pid=2232 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Introspectable member=Introspect dest=:1.8 spid=28103 tpid=2909 scontext=user_u:system_r:rpm_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1190933705.558:110): user pid=2232 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call member=state dest=:1.8 spid=28103 tpid=2909 scontext=user_u:system_r:rpm_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_END msg=audit(1190933705.679:111): user pid=28129 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190933759.664:112): user pid=28150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190933759.664:113): user pid=28150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190933759.716:114): user pid=28150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190933760.060:115): user pid=28150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1190933821.108:116): user pid=28164 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190933821.113:117): user pid=28164 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190933821.113:118): user pid=28164 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190933838.299:119): user pid=28199 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190933838.299:120): user pid=28199 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190933838.335:121): user pid=28199 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190933838.649:122): user pid=28199 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190933854.199:123): user pid=28207 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190933854.199:124): user pid=28207 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190933854.205:125): user pid=28207 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190934061.484:126): user pid=28222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1190934124.644:127): user pid=28207 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190934169.974:128): user pid=3110 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190934169.974:129): user pid=3110 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190934173.335:130): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2728 comm="dhcdbd" sig=6 >type=USER_AVC msg=audit(1190934174.678:131): user pid=2232 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=signal interface=org.freedesktop.NetworkManager member=StateChange dest=org.freedesktop.DBus spid=2909 tpid=28103 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=user_u:system_r:rpm_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=ANOM_ABEND msg=audit(1190934174.678:132): auid=4294967295 uid=81 gid=81 subj=system_u:system_r:system_dbusd_t:s0 pid=2232 comm="dbus-daemon" sig=6 >type=ANOM_ABEND msg=audit(1190934186.214:133): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2118 comm="named" sig=6 >type=DAEMON_END msg=audit(1190934188.656:5646): auditd normal halt, sending auid=4294967295 pid=29213 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2038 >type=DAEMON_START msg=audit(1190962090.836:4967): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1948 res=success, auditd pid=1948 >type=CONFIG_CHANGE msg=audit(1190962090.937:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190962090.937:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190962091.150:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190962091.150:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1190962112.608:32): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2778 comm="hald-addon-acpi" sig=11 >type=USER_AVC msg=audit(1190962112.624:33): user pid=2143 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=signal interface=org.freedesktop.NetworkManager member=StateChange dest=org.freedesktop.DBus spid=2820 tpid=2716 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=ANOM_ABEND msg=audit(1190962112.624:34): auid=4294967295 uid=81 gid=81 subj=system_u:system_r:system_dbusd_t:s0 pid=2143 comm="dbus-daemon" sig=6 >type=ANOM_ABEND msg=audit(1190962112.625:35): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2637 comm="dhcdbd" sig=6 >type=USER_ERR msg=audit(1190962115.433:36): user pid=2928 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190962137.622:37): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190962137.623:38): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190962137.623:39): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190962137.626:40): login pid=3021 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190962137.635:41): user pid=3021 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190962137.636:42): user pid=3021 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190962177.499:43): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3406 comm="gnome-screensav" sig=6 >type=USER_AUTH msg=audit(1190962191.915:44): user pid=3425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190962191.915:45): user pid=3425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190962191.916:46): user pid=3425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190962191.920:47): user pid=3425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190962191.920:48): user pid=3425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190962560.719:49): user pid=4265 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190962560.720:50): user pid=4265 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190962560.720:51): user pid=4265 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190962560.721:52): user pid=4265 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190962560.721:53): user pid=4265 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1190962560.783:54): auid=500 uid=0 gid=0 subj=user_u:system_r:NetworkManager_t:s0 pid=4284 comm="NetworkManager" sig=5 >type=CRED_ACQ msg=audit(1190962610.946:55): user pid=4291 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190962610.946:56): user pid=4291 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190962610.946:57): user pid=4291 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1190962610.984:58): auid=500 uid=0 gid=0 subj=user_u:system_r:NetworkManager_t:s0 pid=4310 comm="NetworkManager" sig=5 >type=USER_END msg=audit(1190962623.544:59): user pid=3021 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190962623.544:60): user pid=3021 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190962633.625:61): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2029 comm="named" sig=6 >type=DAEMON_END msg=audit(1190962633.958:4968): auditd normal halt, sending auid=4294967295 pid=5284 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1948 >type=DAEMON_START msg=audit(1190962713.782:7272): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1906 res=success, auditd pid=1906 >type=CONFIG_CHANGE msg=audit(1190962713.883:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190962713.883:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190962714.174:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190962714.174:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AVC msg=audit(1190962735.244:32): user pid=2101 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=signal interface=org.freedesktop.NetworkManager member=StateChange dest=org.freedesktop.DBus spid=2778 tpid=2674 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=ANOM_ABEND msg=audit(1190962735.244:33): auid=4294967295 uid=81 gid=81 subj=system_u:system_r:system_dbusd_t:s0 pid=2101 comm="dbus-daemon" sig=6 >type=ANOM_ABEND msg=audit(1190962735.245:34): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2595 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1190962736.900:35): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2742 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1190962737.957:36): user pid=2874 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190962780.184:37): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1190962780.184:38): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1190962791.941:39): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1190962791.941:40): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1190962801.653:41): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190962801.655:42): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190962801.655:43): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190962801.657:44): login pid=2970 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190962801.665:45): user pid=2970 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190962801.666:46): user pid=2970 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190962839.405:47): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3290 comm="gnome-screensav" sig=6 >type=USER_ACCT msg=audit(1190962861.759:48): user pid=3294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1190965082.791:49): user pid=2970 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190965082.791:50): user pid=2970 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190965092.908:51): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1987 comm="named" sig=6 >type=DAEMON_END msg=audit(1190965093.338:7273): auditd normal halt, sending auid=4294967295 pid=4401 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1906 >type=DAEMON_START msg=audit(1190967023.493:3723): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1970 res=success, auditd pid=1970 >type=CONFIG_CHANGE msg=audit(1190967023.593:15): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190967023.593:16): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190967023.948:17): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190967023.948:18): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AVC msg=audit(1190967046.925:19): user pid=2230 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=signal interface=org.freedesktop.NetworkManager member=StateChange dest=org.freedesktop.DBus spid=3046 tpid=2922 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=ANOM_ABEND msg=audit(1190967046.925:20): auid=4294967295 uid=81 gid=81 subj=system_u:system_r:system_dbusd_t:s0 pid=2230 comm="dbus-daemon" sig=6 >type=ANOM_ABEND msg=audit(1190967046.926:21): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2833 comm="dhcdbd" sig=6 >type=USER_ERR msg=audit(1190967049.224:22): user pid=3118 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190967071.629:23): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190967071.632:24): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190967071.633:25): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190967071.639:26): login pid=3204 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190967071.659:27): user pid=3204 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190967071.661:28): user pid=3204 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190967110.904:29): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3543 comm="gnome-screensav" sig=6 >type=USER_AUTH msg=audit(1190967114.156:30): user pid=3545 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190967114.156:31): user pid=3545 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190967114.157:32): user pid=3545 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190967114.162:33): user pid=3545 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190967114.162:34): user pid=3545 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190967374.563:35): user pid=3941 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190967374.563:36): user pid=3941 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190967374.610:37): user pid=3941 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190967461.890:38): user pid=3941 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190967491.729:39): user pid=3204 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190967491.730:40): user pid=3204 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190967495.424:41): auid=500 uid=81 gid=81 subj=user_u:system_r:dhcpc_t:s0 pid=4350 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1190967502.158:42): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2076 comm="named" sig=6 >type=DAEMON_END msg=audit(1190967502.497:3724): auditd normal halt, sending auid=4294967295 pid=5157 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1970 >type=DAEMON_START msg=audit(1190971718.773:61): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2011 res=success, auditd pid=2011 >type=CONFIG_CHANGE msg=audit(1190971718.874:15): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190971718.874:16): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190971718.991:17): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190971718.991:18): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AVC msg=audit(1190971742.100:19): user pid=2271 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=signal interface=org.freedesktop.NetworkManager member=StateChange dest=org.freedesktop.DBus spid=3086 tpid=2962 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=ANOM_ABEND msg=audit(1190971742.100:20): auid=4294967295 uid=81 gid=81 subj=system_u:system_r:system_dbusd_t:s0 pid=2271 comm="dbus-daemon" sig=6 >type=ANOM_ABEND msg=audit(1190971742.100:21): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2873 comm="dhcdbd" sig=6 >type=USER_ERR msg=audit(1190971744.741:22): user pid=3160 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1190971782.597:23): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=3049 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1190971787.264:24): user pid=3243 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190971787.266:25): user pid=3243 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190971787.266:26): user pid=3243 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190971787.268:27): login pid=3243 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190971787.276:28): user pid=3243 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190971787.277:29): user pid=3243 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190971828.820:30): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3543 comm="gnome-screensav" sig=6 >type=USER_AUTH msg=audit(1190971884.623:31): user pid=3580 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190971884.623:32): user pid=3580 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190971884.624:33): user pid=3580 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190971884.631:34): user pid=3580 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190971884.631:35): user pid=3580 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190972794.427:36): user pid=3243 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1190972794.428:37): user pid=3243 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190972805.096:38): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2117 comm="named" sig=6 >type=DAEMON_END msg=audit(1190972805.496:62): auditd normal halt, sending auid=4294967295 pid=4645 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2011 >type=DAEMON_START msg=audit(1190973494.402:1735): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1993 res=success, auditd pid=1993 >type=CONFIG_CHANGE msg=audit(1190973494.501:63): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190973494.501:64): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190973494.531:65): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190973494.531:66): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AVC msg=audit(1190973513.324:67): user pid=2253 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=signal interface=org.freedesktop.NetworkManager member=StateChange dest=org.freedesktop.DBus spid=3067 tpid=2944 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=ANOM_ABEND msg=audit(1190973513.324:68): auid=4294967295 uid=81 gid=81 subj=system_u:system_r:system_dbusd_t:s0 pid=2253 comm="dbus-daemon" sig=6 >type=ANOM_ABEND msg=audit(1190973513.326:69): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2855 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1190973514.795:70): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=3028 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1190973515.357:71): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ACCT msg=audit(1190973661.405:72): user pid=3285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190973920.959:73): user pid=3225 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190973920.962:74): user pid=3225 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190973920.963:75): user pid=3225 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190973920.968:76): login pid=3225 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190973920.989:77): user pid=3225 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190973920.991:78): user pid=3225 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1190973953.251:79): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3541 comm="gnome-screensav" sig=6 >type=USER_ACCT msg=audit(1190977261.471:80): user pid=3746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1190977455.706:81): avc: denied { search } for pid=5023 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190977455.706:81): arch=40000003 syscall=195 success=no exit=-13 a0=8925df0 a1=bfbcc0bc a2=816ff4 a3=0 items=0 ppid=5015 pid=5023 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1190977455.706:82): avc: denied { search } for pid=5023 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1190977455.706:82): arch=40000003 syscall=5 success=no exit=-13 a0=8925df0 a1=8000 a2=0 a3=8000 items=0 ppid=5015 pid=5023 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1190978618.997:83): user pid=5130 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190978618.998:84): user pid=5130 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190978619.000:85): user pid=5130 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190978619.038:86): user pid=5130 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190978619.038:87): user pid=5130 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190978734.757:88): user pid=5227 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190978734.757:89): user pid=5227 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190978734.758:90): user pid=5227 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190978734.760:91): user pid=5227 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190978734.761:92): user pid=5227 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1190979037.265:93): user pid=20563 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190979056.336:94): user pid=22855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1190979059.240:95): user pid=20563 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190979059.240:96): user pid=20563 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190979059.241:97): user pid=20563 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190979059.247:98): user pid=20563 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190979059.247:99): user pid=20563 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190979072.024:100): user pid=22855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190979072.024:101): user pid=22855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190979072.024:102): user pid=22855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190979072.031:103): user pid=22855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190979072.031:104): user pid=22855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1190979911.780:105): user pid=9811 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190979911.781:106): user pid=9811 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190979911.782:107): user pid=9811 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190979911.785:108): user pid=9811 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190979911.785:109): user pid=9811 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190979930.795:110): user pid=9814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190979930.796:111): user pid=9814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190979930.796:112): user pid=9814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190980861.557:113): user pid=9908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190984325.789:114): user pid=10413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190984325.789:115): user pid=10413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190984325.791:116): user pid=10413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190984325.795:117): user pid=10413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190984325.795:118): user pid=10413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190984461.599:119): user pid=10488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1190984619.032:120): user pid=8388 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190984619.034:121): user pid=8388 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190984619.034:122): user pid=8388 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1190984631.688:123): auid=500 uid=81 gid=81 subj=user_u:system_r:dhcpc_t:s0 pid=8414 comm="dhcdbd" sig=6 >type=CRED_ACQ msg=audit(1190984634.396:124): user pid=8419 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190984634.402:125): user pid=8419 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190984634.402:126): user pid=8419 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190984744.586:127): user pid=8706 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190984744.593:128): user pid=8706 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190984744.593:129): user pid=8706 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190984825.636:130): user pid=8796 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190984825.641:131): user pid=8796 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190984825.641:132): user pid=8796 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1190985077.822:133): user pid=9208 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190985077.823:134): user pid=9208 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1190985077.824:135): user pid=9208 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1190985077.911:136): user pid=9208 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1190985077.912:137): user pid=9208 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AVC msg=audit(1190985249.170:138): user pid=5245 uid=81 auid=500 subj=user_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=signal interface=org.freedesktop.NetworkManager member=StateChange dest=org.freedesktop.DBus spid=10033 tpid=15508 scontext=user_u:system_r:NetworkManager_t:s0 tcontext=user_u:system_r:rpm_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=ANOM_ABEND msg=audit(1190985249.170:139): auid=500 uid=81 gid=81 subj=user_u:system_r:system_dbusd_t:s0 pid=5245 comm="dbus-daemon" sig=6 >type=ANOM_ABEND msg=audit(1190985250.170:140): auid=500 uid=0 gid=0 subj=user_u:system_r:dhcpc_t:s0 pid=10029 comm="dhcdbd" sig=6 >type=ANOM_ABEND msg=audit(1190985297.332:141): auid=500 uid=0 gid=0 subj=user_u:system_r:NetworkManager_t:s0 pid=10075 comm="NetworkManager" sig=5 >type=USER_AUTH msg=audit(1190985333.840:142): user pid=10097 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190985336.645:143): user pid=10097 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190985336.645:144): user pid=10097 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190985336.646:145): user pid=10097 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190985336.652:146): user pid=10097 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190985336.652:147): user pid=10097 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1190985340.130:148): auid=500 uid=0 gid=0 subj=user_u:system_r:NetworkManager_t:s0 pid=10148 comm="NetworkManager" sig=5 >type=ANOM_ABEND msg=audit(1190985479.628:149): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2098 comm="named" sig=6 >type=DAEMON_START msg=audit(1190987469.925:3579): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2000 res=success, auditd pid=2000 >type=CONFIG_CHANGE msg=audit(1190987470.026:15): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190987470.026:16): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190987470.163:17): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190987470.163:18): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1190987492.670:19): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1190987503.464:20): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=3049 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1190987562.564:21): user pid=3190 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190987562.566:22): user pid=3190 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190987562.566:23): user pid=3190 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190987562.568:24): login pid=3190 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190987562.576:25): user pid=3190 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190987562.577:26): user pid=3190 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=DAEMON_START msg=audit(1190987749.204:694): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2000 res=success, auditd pid=2000 >type=CONFIG_CHANGE msg=audit(1190987749.304:15): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190987749.304:16): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190987749.398:17): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190987749.398:18): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1190987773.696:19): user pid=3101 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1190987773.739:20): user pid=3101 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1190987777.231:21): user pid=3101 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1190987777.231:22): user pid=3101 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1190987777.318:23): login pid=3101 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1190987777.453:24): user pid=3101 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1190987777.458:25): user pid=3101 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1190987777.470:26): user pid=3101 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1190987777.539:27): user pid=3101 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1190987845.253:28): user pid=3101 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1190987845.275:29): user pid=3101 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1190987850.855:30): user pid=3208 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1190987850.855:31): user pid=3208 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1190987853.720:32): user pid=3208 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1190987853.721:33): user pid=3208 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1190987853.724:34): login pid=3208 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1190987853.922:35): user pid=3208 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1190987853.927:36): user pid=3208 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1190987853.928:37): user pid=3208 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1190987853.929:38): user pid=3208 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ERR msg=audit(1190987859.643:39): user pid=3395 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190987875.717:40): user pid=3427 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190987875.720:41): user pid=3427 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190987875.721:42): user pid=3427 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190987875.726:43): login pid=3427 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190987875.746:44): user pid=3427 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190987875.748:45): user pid=3427 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=DAEMON_START msg=audit(1190987994.226:9858): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2001 res=success, auditd pid=2001 >type=CONFIG_CHANGE msg=audit(1190987994.326:15): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190987994.326:16): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1190987994.420:17): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1190987994.420:18): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1190988016.314:19): user pid=3108 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1190988042.758:20): user pid=3190 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190988042.760:21): user pid=3190 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1190988042.760:22): user pid=3190 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1190988042.763:23): login pid=3190 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1190988042.771:24): user pid=3190 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1190988042.772:25): user pid=3190 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1190988061.774:26): user pid=3394 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190988114.764:27): user pid=3483 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1190988117.201:28): user pid=3483 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1190988117.202:29): user pid=3483 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1190988117.202:30): user pid=3483 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1190988117.209:31): user pid=3483 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1190988117.209:32): user pid=3483 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1190988133.148:33): user pid=3628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1190988145.318:34): user pid=3628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190988145.318:35): user pid=3628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190988145.319:36): user pid=3628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190988145.324:37): user pid=3628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190988145.324:38): user pid=3628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1190988311.839:39): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=3050 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1190989927.419:40): user pid=4077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190989927.419:41): user pid=4077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1190989927.420:42): user pid=4077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1190989927.429:43): user pid=4077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1190989927.429:44): user pid=4077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1190991661.996:45): user pid=4542 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1190993512.417:46): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=5007 comm="ffplay" sig=6 >type=USER_AUTH msg=audit(1190993537.990:47): user pid=5013 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190993537.990:48): user pid=5013 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190993538.043:49): user pid=5013 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190993538.510:50): user pid=5013 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1190993571.881:51): user pid=5020 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1190993571.881:52): user pid=5020 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1190993571.904:53): user pid=5020 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1190993638.010:54): user pid=5020 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1190993655.225:55): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=5063 comm="ffplay" sig=6 >type=USER_ACCT msg=audit(1190995261.026:56): user pid=5157 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1190998861.055:57): user pid=5409 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1190999496.756:58): user pid=5432 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1190999496.756:59): user pid=5432 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USYS_CONFIG msg=audit(1190999501.500:60): user pid=5755 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1191002515.000:61): user pid=5906 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191002732.638:62): user pid=6545 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1191002734.248:63): user pid=6545 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191002734.248:64): user pid=6545 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191002734.249:65): user pid=6545 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191002734.257:66): user pid=6545 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191002734.257:67): user pid=6545 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191002960.704:68): user pid=3190 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1191002960.704:69): user pid=3190 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1191002964.277:70): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2863 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1191002971.531:9859): auditd normal halt, sending auid=4294967295 pid=8886 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2001 >type=DAEMON_START msg=audit(1191003030.760:1579): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1974 res=success, auditd pid=1974 >type=CONFIG_CHANGE msg=audit(1191003030.860:15): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1191003030.860:16): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1191003030.963:17): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1191003030.963:18): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1191003055.415:19): user pid=3081 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1191003113.327:20): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=3020 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1191003352.912:21): user pid=3163 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1191003352.914:22): user pid=3163 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1191003352.914:23): user pid=3163 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1191003352.917:24): login pid=3163 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1191003352.924:25): user pid=3163 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1191003352.925:26): user pid=3163 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1191003458.028:27): user pid=3568 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1191003466.385:28): user pid=3568 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191003466.386:29): user pid=3568 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191003466.386:30): user pid=3568 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191003466.392:31): user pid=3568 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191003466.392:32): user pid=3568 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191006061.423:33): user pid=4088 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1191009661.500:34): user pid=5317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1191009830.160:35): user pid=5413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191009830.160:36): user pid=5413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191009830.162:37): user pid=5413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191009830.166:38): user pid=5413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191009830.166:39): user pid=5413 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191013261.533:40): user pid=13489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1191016263.463:41): user pid=14864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191016263.464:42): user pid=14864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191016263.465:43): user pid=14864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191016263.472:44): user pid=14864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191016263.472:45): user pid=14864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191016313.619:46): user pid=14903 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191016313.622:47): user pid=14903 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191016313.622:48): user pid=14903 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1191016318.336:49): avc: denied { search } for pid=14904 comm="sh" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016318.336:49): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc334b8 a2=816ff4 a3=0 items=0 ppid=14903 pid=14904 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016318.338:50): avc: denied { search } for pid=14904 comm="vpnc-script" name="/" dev=dm-6 ino=2 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016318.338:50): arch=40000003 syscall=195 success=no exit=-13 a0=91948d0 a1=bf8fd100 a2=816ff4 a3=bf8fd100 items=0 ppid=14903 pid=14904 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016318.339:51): avc: denied { search } for pid=14905 comm="vpnc-script" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016318.339:51): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8fcaa8 a2=816ff4 a3=0 items=0 ppid=14904 pid=14905 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016318.340:52): avc: denied { search } for pid=14907 comm="vpnc-script" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016318.340:52): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8fc8b8 a2=816ff4 a3=0 items=0 ppid=14906 pid=14907 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016318.340:53): avc: denied { search } for pid=14908 comm="vpnc-script" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016318.340:53): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8fc8b8 a2=816ff4 a3=0 items=0 ppid=14906 pid=14908 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016319.163:54): avc: denied { search } for pid=14924 comm="sh" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016319.163:54): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfb217f8 a2=816ff4 a3=0 items=0 ppid=14903 pid=14924 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016319.167:55): avc: denied { search } for pid=14924 comm="vpnc-script" name="/" dev=dm-6 ino=2 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016319.167:55): arch=40000003 syscall=195 success=no exit=-13 a0=9723320 a1=bfcae920 a2=816ff4 a3=bfcae920 items=0 ppid=14903 pid=14924 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016319.170:56): avc: denied { search } for pid=14925 comm="vpnc-script" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016319.170:56): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfcae2c8 a2=816ff4 a3=0 items=0 ppid=14924 pid=14925 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016319.173:57): avc: denied { search } for pid=14927 comm="vpnc-script" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016319.173:57): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfcae0d8 a2=816ff4 a3=0 items=0 ppid=14926 pid=14927 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016319.173:58): avc: denied { search } for pid=14928 comm="vpnc-script" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016319.173:58): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfcae0d8 a2=816ff4 a3=0 items=0 ppid=14926 pid=14928 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016319.184:59): avc: denied { search } for pid=14924 comm="vpnc-script" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016319.184:59): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfcadac8 a2=816ff4 a3=0 items=0 ppid=14903 pid=14924 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016319.200:60): avc: denied { search } for pid=14934 comm="vpnc-script" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016319.200:60): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfcad328 a2=816ff4 a3=0 items=0 ppid=14932 pid=14934 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016319.204:61): avc: denied { search } for pid=14940 comm="vpnc-script" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016319.204:61): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfcad4f8 a2=816ff4 a3=0 items=0 ppid=14924 pid=14940 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016319.206:62): avc: denied { search } for pid=14943 comm="vpnc-script" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016319.206:62): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfcad4f8 a2=816ff4 a3=0 items=0 ppid=14924 pid=14943 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191016319.209:63): avc: denied { search } for pid=14946 comm="vpnc-script" name="libiptcdata" dev=dm-6 ino=8290643 scontext=user_u:system_r:vpnc_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191016319.209:63): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfcad4f8 a2=816ff4 a3=0 items=0 ppid=14924 pid=14946 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=CRED_ACQ msg=audit(1191016603.269:64): user pid=15091 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191016603.271:65): user pid=15091 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191016603.271:66): user pid=15091 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191016631.355:67): user pid=15099 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191016631.364:68): user pid=15099 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191016631.364:69): user pid=15099 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191016861.577:70): user pid=15255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1191017360.301:71): user pid=15556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191017360.301:72): user pid=15556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191017360.302:73): user pid=15556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191017360.303:74): user pid=15556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191017360.303:75): user pid=15556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191017378.987:76): user pid=15558 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191017378.989:77): user pid=15558 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191017378.990:78): user pid=15558 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191017423.136:79): user pid=15567 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191017423.138:80): user pid=15567 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191017423.138:81): user pid=15567 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1191017441.106:82): user pid=15570 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191017441.107:83): user pid=15570 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1191017441.166:84): user pid=15570 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1191017441.606:85): user pid=15570 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191019147.015:86): user pid=24003 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191019147.015:87): user pid=24003 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191019147.017:88): user pid=24003 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191019147.021:89): user pid=24003 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191019147.021:90): user pid=24003 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1191019584.072:91): user pid=24382 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191019584.073:92): user pid=24382 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191019584.073:93): user pid=24382 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191019584.081:94): user pid=24382 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191019584.081:95): user pid=24382 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1191019827.882:96): user pid=24469 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191019827.886:97): user pid=24469 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1191019828.189:98): user pid=24469 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191019834.659:99): user pid=24500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191019834.659:100): user pid=24500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191019834.780:101): user pid=24500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191019834.882:102): user pid=24500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191019834.882:103): user pid=24500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191019836.138:104): user pid=24469 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191019937.326:105): user pid=24551 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191019937.326:106): user pid=24551 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191019937.405:107): user pid=24551 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191019937.854:108): user pid=24551 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191019943.866:109): user pid=24556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191019943.866:110): user pid=24556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191019943.884:111): user pid=24556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191020084.190:112): user pid=24556 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191020090.023:113): user pid=24569 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191020090.023:114): user pid=24569 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1191020090.030:115): user pid=24569 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1191020154.473:116): user pid=24569 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191020183.648:117): user pid=24584 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191020183.649:118): user pid=24584 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191020183.649:119): user pid=24584 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191020183.652:120): user pid=24584 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191020183.652:121): user pid=24584 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191020206.748:122): user pid=24588 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191020206.750:123): user pid=24588 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191020206.750:124): user pid=24588 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191020227.045:125): user pid=24591 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191020227.047:126): user pid=24591 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191020227.047:127): user pid=24591 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191020238.981:128): user pid=24603 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191020238.982:129): user pid=24603 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191020238.983:130): user pid=24603 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191020262.843:131): user pid=24608 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191020262.844:132): user pid=24608 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191020262.844:133): user pid=24608 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191020287.410:134): user pid=24615 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191020287.411:135): user pid=24615 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191020287.411:136): user pid=24615 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191020292.101:137): user pid=24617 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191020292.103:138): user pid=24617 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191020292.103:139): user pid=24617 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191020299.637:140): user pid=24618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191020299.638:141): user pid=24618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191020299.638:142): user pid=24618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191020301.218:143): user pid=24619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191020301.220:144): user pid=24619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191020301.220:145): user pid=24619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191020326.410:146): user pid=24622 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191020326.411:147): user pid=24622 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191020326.412:148): user pid=24622 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191020359.925:149): user pid=24630 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191020359.927:150): user pid=24630 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191020359.927:151): user pid=24630 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191020461.884:152): user pid=24702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1191021103.181:153): user pid=25806 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191021103.181:154): user pid=25806 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191021103.182:155): user pid=25806 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191021103.186:156): user pid=25806 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191021103.186:157): user pid=25806 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1191021675.482:158): user pid=26017 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191021675.483:159): user pid=26017 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191021675.521:160): user pid=26017 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191021675.552:161): user pid=26017 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191021675.552:162): user pid=26017 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191024061.472:163): user pid=27833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1191024945.664:164): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=3167 comm="Xorg" sig=6 >type=USER_END msg=audit(1191024946.453:165): user pid=3163 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1191024946.469:166): user pid=3163 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1191024961.339:167): auid=500 uid=0 gid=0 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=29149 comm="Xorg" sig=6 >type=ANOM_ABEND msg=audit(1191024972.497:168): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=29188 comm="Xorg" sig=6 >type=ANOM_ABEND msg=audit(1191024983.563:169): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=29226 comm="Xorg" sig=6 >type=DAEMON_START msg=audit(1191046897.991:1168): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2002 res=success, auditd pid=2002 >type=CONFIG_CHANGE msg=audit(1191046898.091:15): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1191046898.091:16): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1191046898.476:17): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1191046898.476:18): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1191046920.835:19): user pid=3109 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1191047011.898:20): user pid=3191 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1191047011.901:21): user pid=3191 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1191047011.902:22): user pid=3191 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1191047011.907:23): login pid=3191 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1191047011.925:24): user pid=3191 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1191047011.926:25): user pid=3191 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1191048830.794:26): user pid=3676 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191048830.795:27): user pid=3676 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191048830.795:28): user pid=3676 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191048830.802:29): user pid=3676 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191048830.802:30): user pid=3676 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191049262.009:31): user pid=4085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1191050949.154:32): avc: denied { search } for pid=5446 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191050949.154:32): arch=40000003 syscall=195 success=no exit=-13 a0=85c4df0 a1=bfb3042c a2=816ff4 a3=0 items=0 ppid=5438 pid=5446 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1191050949.154:33): avc: denied { search } for pid=5446 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191050949.154:33): arch=40000003 syscall=5 success=no exit=-13 a0=85c4df0 a1=8000 a2=0 a3=8000 items=0 ppid=5438 pid=5446 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1191052861.097:34): user pid=5535 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1191056461.132:35): user pid=5698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1191060061.165:36): user pid=5891 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1191063661.193:37): user pid=6054 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1191064879.349:38): user pid=6154 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191064879.350:39): user pid=6154 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USYS_CONFIG msg=audit(1191064883.500:40): user pid=6476 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1191069031.000:41): user pid=6652 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191069045.084:42): user pid=7248 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191069045.084:43): user pid=7248 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191069045.086:44): user pid=7248 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191069045.092:45): user pid=7248 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191069045.092:46): user pid=7248 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1191069055.375:47): user pid=7284 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191069055.376:48): user pid=7284 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191069055.418:49): user pid=7284 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191069056.466:50): user pid=7284 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191069061.806:51): user pid=7293 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191069061.807:52): user pid=7293 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191069061.852:53): user pid=7293 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1191069089.493:54): user pid=7325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)' >type=USER_AUTH msg=audit(1191069091.642:55): user pid=7325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1191069091.643:56): user pid=7325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1191069091.643:57): user pid=7325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1191069091.651:58): user pid=7325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1191069091.651:59): user pid=7325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1191069231.607:60): user pid=7381 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1191069231.609:61): user pid=7381 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1191069231.609:62): user pid=7381 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1191069276.430:63): user pid=7293 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1191069297.828:64): user pid=7387 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1191069297.830:65): user pid=7387 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1191069297.830:66): user pid=7387 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1191069848.278:67): user pid=7594 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)' >type=USER_AUTH msg=audit(1191069851.308:68): user pid=7594 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1191069851.308:69): user pid=7594 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1191069851.309:70): user pid=7594 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1191069851.313:71): user pid=7594 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1191069851.313:72): user pid=7594 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=AVC msg=audit(1191070167.447:73): avc: denied { getattr } for pid=8029 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070167.447:73): arch=40000003 syscall=195 success=no exit=-13 a0=8104948 a1=bffc9f30 a2=816ff4 a3=bffc9f30 items=0 ppid=8028 pid=8029 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC_PATH msg=audit(1191070167.447:73): path="/root" >type=AVC msg=audit(1191070167.447:74): avc: denied { search } for pid=8029 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070167.447:74): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bffc9f48 a2=816ff4 a3=0 items=0 ppid=8028 pid=8029 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191070167.526:75): avc: denied { getattr } for pid=8029 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070167.526:75): arch=40000003 syscall=195 success=no exit=-13 a0=86fba60 a1=bfba5300 a2=816ff4 a3=bfba5300 items=0 ppid=8028 pid=8029 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC_PATH msg=audit(1191070167.526:75): path="/root" >type=AVC msg=audit(1191070167.529:76): avc: denied { search } for pid=8030 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070167.529:76): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfba4ca8 a2=816ff4 a3=0 items=0 ppid=8029 pid=8030 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191070167.532:77): avc: denied { search } for pid=8032 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070167.532:77): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfba4ab8 a2=816ff4 a3=0 items=0 ppid=8031 pid=8032 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191070167.533:78): avc: denied { search } for pid=8033 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070167.533:78): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfba4ab8 a2=816ff4 a3=0 items=0 ppid=8031 pid=8033 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191070168.465:79): avc: denied { getattr } for pid=8049 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070168.465:79): arch=40000003 syscall=195 success=no exit=-13 a0=983e948 a1=bfd50910 a2=816ff4 a3=bfd50910 items=0 ppid=8028 pid=8049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC_PATH msg=audit(1191070168.465:79): path="/root" >type=AVC msg=audit(1191070168.465:80): avc: denied { search } for pid=8049 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070168.465:80): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfd50928 a2=816ff4 a3=0 items=0 ppid=8028 pid=8049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191070168.469:81): avc: denied { getattr } for pid=8049 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070168.469:81): arch=40000003 syscall=195 success=no exit=-13 a0=9f134b0 a1=bff39300 a2=816ff4 a3=bff39300 items=0 ppid=8028 pid=8049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC_PATH msg=audit(1191070168.469:81): path="/root" >type=AVC msg=audit(1191070168.472:82): avc: denied { search } for pid=8050 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070168.472:82): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bff38ca8 a2=816ff4 a3=0 items=0 ppid=8049 pid=8050 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191070168.475:83): avc: denied { search } for pid=8052 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070168.475:83): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bff38ab8 a2=816ff4 a3=0 items=0 ppid=8051 pid=8052 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191070168.476:84): avc: denied { search } for pid=8053 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070168.476:84): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bff38ab8 a2=816ff4 a3=0 items=0 ppid=8051 pid=8053 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191070168.488:85): avc: denied { search } for pid=8049 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070168.488:85): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bff384a8 a2=816ff4 a3=0 items=0 ppid=8028 pid=8049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191070168.529:86): avc: denied { search } for pid=8059 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070168.529:86): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bff37d08 a2=816ff4 a3=0 items=0 ppid=8057 pid=8059 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191070168.536:87): avc: denied { search } for pid=8065 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070168.536:87): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bff37ed8 a2=816ff4 a3=0 items=0 ppid=8049 pid=8065 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191070168.562:88): avc: denied { search } for pid=8068 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070168.562:88): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bff37ed8 a2=816ff4 a3=0 items=0 ppid=8049 pid=8068 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191070168.569:89): avc: denied { search } for pid=8071 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191070168.569:89): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bff37ed8 a2=816ff4 a3=0 items=0 ppid=8049 pid=8071 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=USER_AUTH msg=audit(1191070412.816:90): user pid=8128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1191070412.817:91): user pid=8128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1191070412.818:92): user pid=8128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1191070412.826:93): user pid=8128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1191070412.826:94): user pid=8128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_AUTH msg=audit(1191070771.900:95): user pid=10006 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191070771.900:96): user pid=10006 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191070771.901:97): user pid=10006 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191070771.907:98): user pid=10006 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191070771.907:99): user pid=10006 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1191070774.955:100): user pid=10037 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191070774.955:101): user pid=10037 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191070775.004:102): user pid=10037 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191070826.601:103): user pid=10037 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191070835.426:104): user pid=10053 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191070835.426:105): user pid=10053 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1191070835.479:106): user pid=10053 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191070861.906:107): user pid=10059 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=MAC_POLICY_LOAD msg=audit(1191071644.802:108): policy loaded auid=500 >type=SYSCALL msg=audit(1191071644.802:108): arch=40000003 syscall=4 success=yes exit=1606204 a0=4 a1=b7e4c000 a2=18823c a3=bfae9218 items=0 ppid=10256 pid=10257 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_AVC msg=audit(1191071644.856:109): user pid=2262 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_END msg=audit(1191072555.736:110): user pid=10053 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191072601.672:111): user pid=11821 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191072601.672:112): user pid=11821 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USYS_CONFIG msg=audit(1191072606.500:113): user pid=12130 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1191072620.527:114): user pid=12290 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191072631.813:115): user pid=13016 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1191072634.319:116): user pid=13016 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191072634.319:117): user pid=13016 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191072634.393:118): user pid=13016 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191072634.398:119): user pid=13016 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191072634.398:120): user pid=13016 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191072696.328:121): user pid=3191 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1191072696.329:122): user pid=3191 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1191072700.428:123): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2864 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1191072711.977:1169): auditd normal halt, sending auid=4294967295 pid=13975 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2002 >type=DAEMON_START msg=audit(1191078655.336:9086): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1967 res=success, auditd pid=1967 >type=CONFIG_CHANGE msg=audit(1191078655.436:15): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1191078655.436:16): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1191078655.715:17): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1191078655.715:18): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1191078680.180:19): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=3019 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1191078681.114:20): user pid=3077 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1191078738.664:21): user pid=3160 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1191078738.668:22): user pid=3160 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1191078738.669:23): user pid=3160 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1191078738.675:24): login pid=3160 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1191078738.695:25): user pid=3160 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1191078738.697:26): user pid=3160 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1191078793.754:27): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191078793.754:28): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191078793.789:29): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191078793.796:30): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191078793.796:31): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1191078814.061:32): user pid=3579 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191078814.061:33): user pid=3579 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191078814.062:34): user pid=3579 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191078814.065:35): user pid=3579 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191078814.065:36): user pid=3579 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AVC msg=audit(1191078898.433:37): user pid=2227 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=signal interface=org.freedesktop.NetworkManager member=StateChange dest=org.freedesktop.DBus spid=3601 tpid=2921 scontext=user_u:system_r:NetworkManager_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=ANOM_ABEND msg=audit(1191078898.433:38): auid=4294967295 uid=81 gid=81 subj=system_u:system_r:system_dbusd_t:s0 pid=2227 comm="dbus-daemon" sig=6 >type=ANOM_ABEND msg=audit(1191078898.434:39): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2832 comm="dhcdbd" sig=6 >type=AVC msg=audit(1191078898.950:40): avc: denied { search } for pid=3621 comm="gdb" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191078898.950:40): arch=40000003 syscall=195 success=no exit=-13 a0=a157ca8 a1=bfd0f690 a2=816ff4 a3=3 items=0 ppid=3620 pid=3621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="gdb" exe="/usr/bin/gdb" subj=user_u:system_r:NetworkManager_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1191078934.443:41): auid=500 uid=0 gid=0 subj=user_u:system_r:NetworkManager_t:s0 pid=3660 comm="NetworkManager" sig=5 >type=AVC msg=audit(1191079099.282:42): avc: denied { getattr } for pid=4142 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079099.282:42): arch=40000003 syscall=195 success=no exit=-13 a0=8b27948 a1=bff53340 a2=816ff4 a3=bff53340 items=0 ppid=4140 pid=4142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC_PATH msg=audit(1191079099.282:42): path="/root" >type=AVC msg=audit(1191079099.283:43): avc: denied { search } for pid=4142 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079099.283:43): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bff53358 a2=816ff4 a3=0 items=0 ppid=4140 pid=4142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191079099.299:44): avc: denied { getattr } for pid=4142 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079099.299:44): arch=40000003 syscall=195 success=no exit=-13 a0=8494a60 a1=bfef1e40 a2=816ff4 a3=bfef1e40 items=0 ppid=4140 pid=4142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC_PATH msg=audit(1191079099.299:44): path="/root" >type=AVC msg=audit(1191079099.302:45): avc: denied { search } for pid=4143 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079099.302:45): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfef17e8 a2=816ff4 a3=0 items=0 ppid=4142 pid=4143 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191079099.305:46): avc: denied { search } for pid=4145 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079099.305:46): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfef15f8 a2=816ff4 a3=0 items=0 ppid=4144 pid=4145 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191079099.307:47): avc: denied { search } for pid=4146 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079099.307:47): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfef15f8 a2=816ff4 a3=0 items=0 ppid=4144 pid=4146 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191079114.100:48): avc: denied { getattr } for pid=4171 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079114.100:48): arch=40000003 syscall=195 success=no exit=-13 a0=9d78948 a1=bfc43800 a2=816ff4 a3=bfc43800 items=0 ppid=4140 pid=4171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC_PATH msg=audit(1191079114.100:48): path="/root" >type=AVC msg=audit(1191079114.100:49): avc: denied { search } for pid=4171 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079114.100:49): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc43818 a2=816ff4 a3=0 items=0 ppid=4140 pid=4171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191079114.104:50): avc: denied { getattr } for pid=4171 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079114.104:50): arch=40000003 syscall=195 success=no exit=-13 a0=9ae44b0 a1=bfe099d0 a2=816ff4 a3=bfe099d0 items=0 ppid=4140 pid=4171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC_PATH msg=audit(1191079114.104:50): path="/root" >type=AVC msg=audit(1191079114.106:51): avc: denied { search } for pid=4172 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079114.106:51): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfe09378 a2=816ff4 a3=0 items=0 ppid=4171 pid=4172 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191079114.109:52): avc: denied { search } for pid=4174 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079114.109:52): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfe09188 a2=816ff4 a3=0 items=0 ppid=4173 pid=4174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191079114.110:53): avc: denied { search } for pid=4175 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079114.110:53): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfe09188 a2=816ff4 a3=0 items=0 ppid=4173 pid=4175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191079114.121:54): avc: denied { search } for pid=4171 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079114.121:54): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfe08b78 a2=816ff4 a3=0 items=0 ppid=4140 pid=4171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191079114.140:55): avc: denied { search } for pid=4181 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079114.140:55): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfe083d8 a2=816ff4 a3=0 items=0 ppid=4179 pid=4181 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191079114.144:56): avc: denied { search } for pid=4187 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079114.144:56): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfe085a8 a2=816ff4 a3=0 items=0 ppid=4171 pid=4187 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191079114.221:57): avc: denied { search } for pid=4190 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079114.221:57): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfe085a8 a2=816ff4 a3=0 items=0 ppid=4171 pid=4190 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191079114.227:58): avc: denied { search } for pid=4193 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191079114.227:58): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfe085a8 a2=816ff4 a3=0 items=0 ppid=4171 pid=4193 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=USER_END msg=audit(1191079405.425:59): user pid=3160 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1191079405.425:60): user pid=3160 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1191079429.921:61): user pid=3160 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1191079429.925:62): user pid=3160 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1191079429.926:63): user pid=3160 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1191079429.932:64): login pid=3160 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1191079429.951:65): user pid=3160 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1191079429.952:66): user pid=3160 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1191081661.160:67): user pid=4741 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1191085261.241:68): user pid=4962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1191088861.268:69): user pid=5270 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1191092461.296:70): user pid=5562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1191095911.761:71): user pid=5795 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191095911.761:72): user pid=5795 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191095911.762:73): user pid=5795 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191095911.770:74): user pid=5795 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191095911.770:75): user pid=5795 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191095994.401:76): user pid=6826 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191095994.402:77): user pid=6826 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191095994.402:78): user pid=6826 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191096016.971:79): user pid=6827 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191096016.980:80): user pid=6827 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191096016.980:81): user pid=6827 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191096022.810:82): user pid=6858 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191096022.815:83): user pid=6858 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191096022.815:84): user pid=6858 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191096061.327:85): user pid=6938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1191096063.253:86): avc: denied { getattr } for pid=6940 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096063.253:86): arch=40000003 syscall=195 success=no exit=-13 a0=9487948 a1=bfa3d9b0 a2=816ff4 a3=bfa3d9b0 items=0 ppid=6937 pid=6940 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC_PATH msg=audit(1191096063.253:86): path="/root" >type=AVC msg=audit(1191096063.254:87): avc: denied { search } for pid=6940 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096063.254:87): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfa3d9c8 a2=816ff4 a3=0 items=0 ppid=6937 pid=6940 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191096063.257:88): avc: denied { getattr } for pid=6940 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096063.257:88): arch=40000003 syscall=195 success=no exit=-13 a0=8975a60 a1=bfa5e9b0 a2=816ff4 a3=bfa5e9b0 items=0 ppid=6937 pid=6940 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC_PATH msg=audit(1191096063.257:88): path="/root" >type=AVC msg=audit(1191096063.260:89): avc: denied { search } for pid=6941 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096063.260:89): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfa5e358 a2=816ff4 a3=0 items=0 ppid=6940 pid=6941 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191096063.263:90): avc: denied { search } for pid=6943 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096063.263:90): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfa5e168 a2=816ff4 a3=0 items=0 ppid=6942 pid=6943 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191096063.264:91): avc: denied { search } for pid=6944 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096063.264:91): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfa5e168 a2=816ff4 a3=0 items=0 ppid=6942 pid=6944 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191096064.050:92): avc: denied { getattr } for pid=6953 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096064.050:92): arch=40000003 syscall=195 success=no exit=-13 a0=835c948 a1=bffd9b90 a2=816ff4 a3=bffd9b90 items=0 ppid=6937 pid=6953 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC_PATH msg=audit(1191096064.050:92): path="/root" >type=AVC msg=audit(1191096064.050:93): avc: denied { search } for pid=6953 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096064.050:93): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bffd9ba8 a2=816ff4 a3=0 items=0 ppid=6937 pid=6953 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191096064.054:94): avc: denied { getattr } for pid=6953 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096064.054:94): arch=40000003 syscall=195 success=no exit=-13 a0=91f54b0 a1=bfd92160 a2=816ff4 a3=bfd92160 items=0 ppid=6937 pid=6953 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC_PATH msg=audit(1191096064.054:94): path="/root" >type=AVC msg=audit(1191096064.057:95): avc: denied { search } for pid=6954 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096064.057:95): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfd91b08 a2=816ff4 a3=0 items=0 ppid=6953 pid=6954 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191096064.060:96): avc: denied { search } for pid=6956 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096064.060:96): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfd91918 a2=816ff4 a3=0 items=0 ppid=6955 pid=6956 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191096064.062:97): avc: denied { search } for pid=6957 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096064.062:97): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfd91918 a2=816ff4 a3=0 items=0 ppid=6955 pid=6957 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191096064.073:98): avc: denied { search } for pid=6953 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096064.073:98): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfd91308 a2=816ff4 a3=0 items=0 ppid=6937 pid=6953 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191096064.094:99): avc: denied { search } for pid=6963 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096064.094:99): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfd90b68 a2=816ff4 a3=0 items=0 ppid=6961 pid=6963 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191096064.105:100): avc: denied { search } for pid=6969 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096064.105:100): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfd90d38 a2=816ff4 a3=0 items=0 ppid=6953 pid=6969 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191096064.111:101): avc: denied { search } for pid=6972 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096064.111:101): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfd90d38 a2=816ff4 a3=0 items=0 ppid=6953 pid=6972 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191096064.117:102): avc: denied { search } for pid=6975 comm="vpnc-script" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191096064.117:102): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfd90d38 a2=816ff4 a3=0 items=0 ppid=6953 pid=6975 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191098262.144:103): avc: denied { search } for pid=7496 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191098262.144:103): arch=40000003 syscall=33 success=no exit=-13 a0=8bb6c00 a1=4 a2=3a1c96c a3=8baf004 items=0 ppid=7490 pid=7496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1191098263.499:104): user pid=7597 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1191103619.258:105): user pid=7759 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1191103620.008:106): avc: denied { search } for pid=7766 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191103620.008:106): arch=40000003 syscall=33 success=no exit=-13 a0=87fcc00 a1=4 a2=3a1c96c a3=87f5004 items=0 ppid=7764 pid=7766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USER_ACCT msg=audit(1191106861.117:107): user pid=8487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1191108021.673:108): user pid=8591 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1191108024.178:109): user pid=8591 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191108024.179:110): user pid=8591 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1191108024.226:111): user pid=8591 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1191108025.138:112): user pid=8591 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191108066.311:113): user pid=8603 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191108066.311:114): user pid=8603 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1191108066.317:115): user pid=8603 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1191108093.503:116): user pid=8603 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191108378.139:117): user pid=8657 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1191108385.559:118): user pid=8660 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191108385.559:119): user pid=8660 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1191108385.572:120): user pid=8660 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1191108577.103:121): user pid=8660 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191110188.955:122): user pid=8866 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1191110188.955:123): user pid=8866 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USYS_CONFIG msg=audit(1191110191.500:124): user pid=9092 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1191137554.315:6933): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1998 res=success, auditd pid=1998 >type=CONFIG_CHANGE msg=audit(1191137554.414:15): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1191137554.414:16): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1191137554.642:17): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1191137554.642:18): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1191137576.980:19): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=3034 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1191137577.658:20): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1191137652.749:21): user pid=3189 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1191137652.753:22): user pid=3189 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1191137652.754:23): user pid=3189 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1191137652.760:24): login pid=3189 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1191137652.780:25): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1191137652.782:26): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1191139261.149:27): user pid=3676 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1191139468.467:28): user pid=3716 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191139468.467:29): user pid=3716 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191139468.468:30): user pid=3716 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191139468.472:31): user pid=3716 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191139468.472:32): user pid=3716 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1191140586.960:33): user pid=4052 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191140586.960:34): user pid=4052 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1191140590.499:35): user pid=4315 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1191150774.000:36): user pid=4532 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191150782.158:37): user pid=5031 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191150782.158:38): user pid=5031 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191150782.160:39): user pid=5031 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191150782.166:40): user pid=5031 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191150782.167:41): user pid=5031 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1191152001.658:42): user pid=8619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1191152003.448:43): user pid=8619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1191152003.448:44): user pid=8619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1191152003.449:45): user pid=8619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1191152003.455:46): user pid=8619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1191152003.455:47): user pid=8619 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1191152457.112:48): user pid=9406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191152457.112:49): user pid=9406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191152457.113:50): user pid=9406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191152457.114:51): user pid=9406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191152457.114:52): user pid=9406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1191152548.434:53): avc: denied { search } for pid=9929 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191152548.434:53): arch=40000003 syscall=195 success=no exit=-13 a0=90dfdf0 a1=bf80a4fc a2=816ff4 a3=0 items=0 ppid=9921 pid=9929 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1191152548.434:54): avc: denied { search } for pid=9929 comm="procmail" name="/" dev=dm-6 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191152548.434:54): arch=40000003 syscall=5 success=no exit=-13 a0=90dfdf0 a1=8000 a2=0 a3=8000 items=0 ppid=9921 pid=9929 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1191153287.002:55): user pid=11116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191153287.002:56): user pid=11116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1191153287.069:57): user pid=11116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191153661.276:58): user pid=11211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1191154005.730:59): user pid=11116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191154458.658:60): user pid=11496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191154458.658:61): user pid=11496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191154458.659:62): user pid=11496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191154458.668:63): user pid=11496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191154458.669:64): user pid=11496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191154540.417:65): user pid=11533 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191154540.420:66): user pid=11533 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191154540.420:67): user pid=11533 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1191154547.073:68): user pid=11649 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191154547.074:69): user pid=11649 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USYS_CONFIG msg=audit(1191154550.500:70): user pid=11876 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1191156721.028:71): user pid=12016 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191156727.326:72): user pid=12308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191156727.327:73): user pid=12308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191156727.328:74): user pid=12308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191156727.337:75): user pid=12308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191156727.337:76): user pid=12308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191157025.041:77): user pid=21007 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191157025.044:78): user pid=21007 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191157025.044:79): user pid=21007 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1191157110.470:80): user pid=21859 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)' >type=USER_AUTH msg=audit(1191157112.780:81): user pid=21859 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1191157112.780:82): user pid=21859 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1191157112.781:83): user pid=21859 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1191157112.784:84): user pid=21859 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1191157112.784:85): user pid=21859 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1191157226.467:86): user pid=21912 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1191157226.469:87): user pid=21912 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1191157226.469:88): user pid=21912 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1191157261.312:89): user pid=21956 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1191160181.074:90): user pid=23672 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1191160181.074:91): user pid=23672 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USYS_CONFIG msg=audit(1191160185.500:92): user pid=23863 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1191175671.428:93): user pid=24093 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1191175701.086:94): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1191175701.129:95): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1191175722.943:96): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1191175722.944:97): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1191175730.617:98): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1191175730.617:99): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1191175741.491:100): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1191175741.495:101): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1191175741.496:102): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1191175741.576:103): login pid=3189 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1191175741.595:104): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1191175741.595:105): user pid=3189 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1191175780.155:106): user pid=24854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191175780.156:107): user pid=24854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191175780.156:108): user pid=24854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191175780.165:109): user pid=24854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191175780.165:110): user pid=24854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1191177916.928:111): user pid=26177 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1191177926.573:112): user pid=26182 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191177926.574:113): user pid=26182 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1191177926.680:114): user pid=26182 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191178862.051:115): user pid=26228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1191179824.915:116): user pid=26182 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191180498.439:117): user pid=28057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191180498.439:118): user pid=28057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191180498.441:119): user pid=28057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191180498.445:120): user pid=28057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191180498.445:121): user pid=28057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1191180502.802:122): avc: denied { search } for pid=28058 comm="sh" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180502.802:122): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfcd1d58 a2=816ff4 a3=0 items=0 ppid=28057 pid=28058 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180502.819:123): avc: denied { search } for pid=28058 comm="vpnc-script" name="/" dev=dm-6 ino=2 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180502.819:123): arch=40000003 syscall=195 success=no exit=-13 a0=a0f28d0 a1=bf99d9c0 a2=816ff4 a3=bf99d9c0 items=0 ppid=28057 pid=28058 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180502.822:124): avc: denied { search } for pid=28059 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180502.822:124): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf99d368 a2=816ff4 a3=0 items=0 ppid=28058 pid=28059 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180502.825:125): avc: denied { search } for pid=28061 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180502.825:125): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf99d178 a2=816ff4 a3=0 items=0 ppid=28060 pid=28061 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180502.827:126): avc: denied { search } for pid=28062 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180502.827:126): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf99d178 a2=816ff4 a3=0 items=0 ppid=28060 pid=28062 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180503.789:127): avc: denied { search } for pid=28078 comm="sh" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180503.789:127): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8c4598 a2=816ff4 a3=0 items=0 ppid=28057 pid=28078 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180503.792:128): avc: denied { search } for pid=28078 comm="vpnc-script" name="/" dev=dm-6 ino=2 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180503.792:128): arch=40000003 syscall=195 success=no exit=-13 a0=964d320 a1=bf8bad50 a2=816ff4 a3=bf8bad50 items=0 ppid=28057 pid=28078 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180503.795:129): avc: denied { search } for pid=28079 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180503.795:129): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8ba6f8 a2=816ff4 a3=0 items=0 ppid=28078 pid=28079 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180503.798:130): avc: denied { search } for pid=28081 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180503.798:130): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8ba508 a2=816ff4 a3=0 items=0 ppid=28080 pid=28081 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180503.799:131): avc: denied { search } for pid=28082 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180503.799:131): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8ba508 a2=816ff4 a3=0 items=0 ppid=28080 pid=28082 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180503.811:132): avc: denied { search } for pid=28078 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180503.811:132): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8b9ef8 a2=816ff4 a3=0 items=0 ppid=28057 pid=28078 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180503.830:133): avc: denied { search } for pid=28088 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180503.830:133): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8b9758 a2=816ff4 a3=0 items=0 ppid=28086 pid=28088 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180503.869:134): avc: denied { search } for pid=28094 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180503.869:134): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8b9928 a2=816ff4 a3=0 items=0 ppid=28078 pid=28094 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180503.910:135): avc: denied { search } for pid=28097 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180503.910:135): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8b9928 a2=816ff4 a3=0 items=0 ppid=28078 pid=28097 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191180503.917:136): avc: denied { search } for pid=28100 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191180503.917:136): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8b9928 a2=816ff4 a3=0 items=0 ppid=28078 pid=28100 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=USER_AUTH msg=audit(1191180620.536:137): user pid=28055 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1191182219.281:138): user pid=30386 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191182219.282:139): user pid=30386 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191182219.283:140): user pid=30386 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191182219.331:141): user pid=30386 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191182219.331:142): user pid=30386 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191182461.312:143): user pid=30439 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1191185540.383:144): user pid=30735 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191185540.383:145): user pid=30735 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191185540.384:146): user pid=30735 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191185540.388:147): user pid=30735 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191185540.388:148): user pid=30735 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1191185544.246:149): avc: denied { search } for pid=30736 comm="sh" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185544.246:149): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfabbb48 a2=816ff4 a3=0 items=0 ppid=30735 pid=30736 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185544.250:150): avc: denied { search } for pid=30736 comm="vpnc-script" name="/" dev=dm-6 ino=2 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185544.250:150): arch=40000003 syscall=195 success=no exit=-13 a0=87d98d0 a1=bfc29450 a2=816ff4 a3=bfc29450 items=0 ppid=30735 pid=30736 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185544.253:151): avc: denied { search } for pid=30737 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185544.253:151): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc28df8 a2=816ff4 a3=0 items=0 ppid=30736 pid=30737 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185544.256:152): avc: denied { search } for pid=30739 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185544.256:152): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc28c08 a2=816ff4 a3=0 items=0 ppid=30738 pid=30739 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185544.258:153): avc: denied { search } for pid=30740 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185544.258:153): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc28c08 a2=816ff4 a3=0 items=0 ppid=30738 pid=30740 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=CRED_ACQ msg=audit(1191185550.009:154): user pid=30744 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191185550.010:155): user pid=30744 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191185550.010:156): user pid=30744 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191185552.400:157): user pid=30761 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191185552.402:158): user pid=30761 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191185552.402:159): user pid=30761 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1191185556.535:160): avc: denied { search } for pid=30762 comm="sh" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185556.535:160): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfd2edb8 a2=816ff4 a3=0 items=0 ppid=30761 pid=30762 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185556.539:161): avc: denied { search } for pid=30762 comm="vpnc-script" name="/" dev=dm-6 ino=2 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185556.539:161): arch=40000003 syscall=195 success=no exit=-13 a0=982e8d0 a1=bf94f970 a2=816ff4 a3=bf94f970 items=0 ppid=30761 pid=30762 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185556.541:162): avc: denied { search } for pid=30763 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185556.541:162): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf94f318 a2=816ff4 a3=0 items=0 ppid=30762 pid=30763 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185556.544:163): avc: denied { search } for pid=30765 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185556.544:163): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf94f128 a2=816ff4 a3=0 items=0 ppid=30764 pid=30765 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185556.546:164): avc: denied { search } for pid=30766 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185556.546:164): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf94f128 a2=816ff4 a3=0 items=0 ppid=30764 pid=30766 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185557.317:165): avc: denied { search } for pid=30775 comm="sh" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185557.317:165): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfae2fb8 a2=816ff4 a3=0 items=0 ppid=30761 pid=30775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185557.320:166): avc: denied { search } for pid=30775 comm="vpnc-script" name="/" dev=dm-6 ino=2 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185557.320:166): arch=40000003 syscall=195 success=no exit=-13 a0=8613320 a1=bfc2a8c0 a2=816ff4 a3=bfc2a8c0 items=0 ppid=30761 pid=30775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185557.323:167): avc: denied { search } for pid=30776 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185557.323:167): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc2a268 a2=816ff4 a3=0 items=0 ppid=30775 pid=30776 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185557.326:168): avc: denied { search } for pid=30778 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185557.326:168): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc2a078 a2=816ff4 a3=0 items=0 ppid=30777 pid=30778 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185557.327:169): avc: denied { search } for pid=30779 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185557.327:169): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc2a078 a2=816ff4 a3=0 items=0 ppid=30777 pid=30779 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185557.337:170): avc: denied { search } for pid=30775 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185557.337:170): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc29a68 a2=816ff4 a3=0 items=0 ppid=30761 pid=30775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185557.345:171): avc: denied { search } for pid=30785 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185557.345:171): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc292c8 a2=816ff4 a3=0 items=0 ppid=30783 pid=30785 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185557.349:172): avc: denied { search } for pid=30791 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185557.349:172): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc29498 a2=816ff4 a3=0 items=0 ppid=30775 pid=30791 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185557.351:173): avc: denied { search } for pid=30794 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185557.351:173): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc29498 a2=816ff4 a3=0 items=0 ppid=30775 pid=30794 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=AVC msg=audit(1191185557.354:174): avc: denied { search } for pid=30797 comm="vpnc-script" name="matej" dev=dm-6 ino=6635521 scontext=user_u:system_r:vpnc_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191185557.354:174): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bfc29498 a2=816ff4 a3=0 items=0 ppid=30775 pid=30797 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc-script" exe="/bin/bash" subj=user_u:system_r:vpnc_t:s0 key=(null) >type=USER_ACCT msg=audit(1191186061.381:175): user pid=31211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1191186191.538:176): user pid=31279 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=failed)' >type=USER_AUTH msg=audit(1191186193.332:177): user pid=31279 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1191186193.332:178): user pid=31279 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_ACQ msg=audit(1191186193.375:179): user pid=31279 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1191186193.386:180): user pid=31279 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1191186193.386:181): user pid=31279 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_AUTH msg=audit(1191188623.152:182): user pid=31820 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1191188623.152:183): user pid=31820 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1191188623.273:184): user pid=31820 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1191188624.741:185): user pid=31820 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191188631.871:186): user pid=31831 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1191188631.871:187): user pid=31831 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1191188631.883:188): user pid=31831 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1191188641.692:189): user pid=31831 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1191189575.248:190): avc: denied { search } for pid=5762 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191189575.248:190): arch=40000003 syscall=33 success=no exit=-13 a0=808ec00 a1=4 a2=3a1c96c a3=8087004 items=0 ppid=5757 pid=5762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1191189576.499:191): user pid=5810 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1191220016.569:192): user pid=5988 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1191220017.432:193): avc: denied { search } for pid=5994 comm="alsactl" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1191220017.432:193): arch=40000003 syscall=33 success=no exit=-13 a0=90a8c00 a1=4 a2=3a1c96c a3=90a1004 items=0 ppid=5992 pid=5994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null) >type=USER_AUTH msg=audit(1191221039.503:194): user pid=6497 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191221039.503:195): user pid=6497 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USYS_CONFIG msg=audit(1191221042.500:196): user pid=6710 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1191225999.000:197): user pid=6948 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191226341.793:198): user pid=7389 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191226341.793:199): user pid=7389 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USYS_CONFIG msg=audit(1191226344.500:200): user pid=7607 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1191245339.546:201): user pid=7769 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191245359.988:202): user pid=8071 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1191245361.663:203): user pid=8071 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191245361.663:204): user pid=8071 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191245361.698:205): user pid=8071 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191245361.730:206): user pid=8071 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191245361.730:207): user pid=8071 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1191245404.157:208): user pid=8992 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191245404.158:209): user pid=8992 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191245404.446:210): user pid=8992 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191245405.762:211): user pid=8992 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191245410.796:212): user pid=9001 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191245410.796:213): user pid=9001 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191245410.807:214): user pid=9001 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191245459.998:215): user pid=9001 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1191245517.136:216): user pid=9015 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191245517.148:217): user pid=9015 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191245517.148:218): user pid=9015 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AVC msg=audit(1191246387.941:219): user pid=2258 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1191246387.884:220): policy loaded auid=500 >type=SYSCALL msg=audit(1191246387.884:220): arch=40000003 syscall=4 success=yes exit=1606240 a0=4 a1=b7e30000 a2=188260 a3=bf8e1648 items=0 ppid=9269 pid=9270 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null) >type=MAC_POLICY_LOAD msg=audit(1191246493.676:221): policy loaded auid=500 >type=SYSCALL msg=audit(1191246493.676:221): arch=40000003 syscall=4 success=yes exit=1606252 a0=4 a1=b7da8000 a2=18826c a3=bfab0018 items=0 ppid=9293 pid=9294 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null) >type=USER_AVC msg=audit(1191246493.730:222): user pid=2258 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1191246571.823:223): user pid=2258 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1191246571.771:224): policy loaded auid=500 >type=SYSCALL msg=audit(1191246571.771:224): arch=40000003 syscall=4 success=yes exit=1606264 a0=4 a1=b7d95000 a2=188278 a3=bfd512b8 items=0 ppid=9312 pid=9313 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null) >type=USER_AUTH msg=audit(1191247200.926:225): user pid=9512 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1191247200.926:226): user pid=9512 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1191247200.928:227): user pid=9512 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1191247200.931:228): user pid=9512 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1191247200.932:229): user pid=9512 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1191247261.908:230): user pid=9516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1191248109.871:231): user pid=25909 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1191248109.871:232): user pid=25909 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1191248109.872:233): user pid=25909 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1191248109.873:234): user pid=25909 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1191248109.873:235): user pid=25909 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1191248427.538:236): user pid=25944 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191248427.539:237): user pid=25944 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191248427.539:238): user pid=25944 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191248427.542:239): user pid=25944 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191248427.542:240): user pid=25944 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1191248482.466:241): user pid=25954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1191248482.467:242): user pid=25954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1191248482.468:243): user pid=25954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1191248482.471:244): user pid=25954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1191248482.471:245): user pid=25954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1191248539.507:246): user pid=25965 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191248539.509:247): user pid=25965 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191248539.509:248): user pid=25965 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191248665.637:249): user pid=586 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1191248665.638:250): user pid=586 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1191248665.638:251): user pid=586 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1191248760.881:252): user pid=717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1191248760.883:253): user pid=717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1191248760.883:254): user pid=717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1191250588.122:255): user pid=5984 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1191250588.123:256): user pid=5984 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1191250588.131:257): user pid=5984 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1191250612.664:258): user pid=5984 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1191250739.783:259): user pid=6061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191250739.784:260): user pid=6061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1191250739.785:261): user pid=6061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1191250739.790:262): user pid=6061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1191250739.790:263): user pid=6061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1191250862.114:264): user pid=6110 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=212331">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 313971
: 212331 |
212341
|
212351
|
212361
|
212371