Attachment 228751 Details for Bug 316041 – /var/log/audit/audit.log

/var/log/audit/audit.log

audit.log (text/plain), 1.09 MB, created by Matěj Cepl on 2007-10-16 13:48:13 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Matěj Cepl

Created: 2007-10-16 13:48:13 UTC

Size: 1.09 MB

patch

obsolete

>type=DAEMON_ROTATE msg=audit(1191578442.357:738): auditd sending auid=500 pid=3198 subj=system_u:system_r:unconfined_t:s0, auditd pid=1836
>type=USER_ACCT msg=audit(1191578461.867:28): user pid=3199 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191578559.306:29): avc:  denied  { execstack } for  pid=3253 comm="totem" scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=process
>type=AVC msg=audit(1191578559.306:29): avc:  denied  { execmem } for  pid=3253 comm="totem" scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=process
>type=SYSCALL msg=audit(1191578559.306:29): arch=c000003e syscall=10 success=yes exit=0 a0=7fff846e0000 a1=1000 a2=1000007 a3=4 items=0 ppid=1 pid=3253 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem" exe="/usr/bin/totem" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191579301.036:30): user pid=3985 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191579301.038:31): avc:  denied  { search } for  pid=3985 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191579301.038:31): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2370 pid=3985 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191579459.860:32): avc:  denied  { execstack } for  pid=4014 comm="totem" scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=process
>type=AVC msg=audit(1191579459.860:32): avc:  denied  { execmem } for  pid=4014 comm="totem" scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=process
>type=SYSCALL msg=audit(1191579459.860:32): arch=c000003e syscall=10 success=yes exit=0 a0=7fff2b3f2000 a1=1000 a2=1000007 a3=4 items=0 ppid=1 pid=4014 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem" exe="/usr/bin/totem" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191580201.131:33): user pid=4081 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191581101.422:34): user pid=4201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191582001.862:35): user pid=4412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191582037.859:36): user pid=4448 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191582037.868:37): user pid=4448 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1191582037.869:38): user pid=4448 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1191582037.872:39): user pid=4448 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1191582037.872:40): user pid=4448 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1191582037.873:41): user pid=4448 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/bin/rpm" (terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1191582042.956:42): user pid=4452 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1191582042.964:43): user pid=4452 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1191582042.964:44): user pid=4452 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1191582042.965:45): user pid=4452 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191582061.863:46): user pid=4498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191582773.985:47): user pid=4590 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1191582788.024:48): user pid=4595 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191582788.025:49): user pid=4595 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191582788.077:50): user pid=4595 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1191582789.570:51): avc:  denied  { read write } for  pid=2721 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=27721741 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1191582789.570:51): arch=c000003e syscall=30 success=yes exit=-817442816 a0=1a7000d a1=0 a2=0 a3=0 items=0 ppid=2716 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191582901.230:52): user pid=4607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191582901.232:53): avc:  denied  { search } for  pid=4607 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191582901.232:53): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2370 pid=4607 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1191583724.304:54): user pid=4771 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191583724.313:55): user pid=4771 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191583724.314:56): user pid=4771 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191583724.317:57): user pid=4771 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191583724.317:58): user pid=4771 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191583724.318:59): user pid=4771 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/bin/rpm" (terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1191583748.257:60): user pid=4779 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191583748.257:61): user pid=4779 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191583748.272:62): user pid=4779 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1191583749.500:63): avc:  denied  { read write } for  pid=2721 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=27951120 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1191583749.500:63): arch=c000003e syscall=30 success=yes exit=-816656384 a0=1aa8010 a1=0 a2=0 a3=3eaf5509f0 items=0 ppid=2716 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1191583752.347:64): user pid=4779 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1191583757.479:65): user pid=4792 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191583757.486:66): user pid=4792 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191583757.486:67): user pid=4792 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191583757.487:68): user pid=4792 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191583771.067:69): user pid=4595 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191583801.803:70): user pid=4830 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191583801.805:71): avc:  denied  { search } for  pid=4830 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191583801.805:71): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2370 pid=4830 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191584261.098:72): avc:  denied  { read write } for  pid=2721 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=28016653 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1191584261.098:72): arch=c000003e syscall=30 success=yes exit=-817442816 a0=1ab800d a1=0 a2=0 a3=0 items=0 ppid=2716 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191584701.223:73): user pid=4931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191584701.225:74): avc:  denied  { search } for  pid=4931 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191584701.225:74): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2370 pid=4931 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191585057.423:75): avc:  denied  { execstack } for  pid=4967 comm="totem" scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=process
>type=AVC msg=audit(1191585057.423:75): avc:  denied  { execmem } for  pid=4967 comm="totem" scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=process
>type=SYSCALL msg=audit(1191585057.423:75): arch=c000003e syscall=10 success=yes exit=0 a0=7fff81d56000 a1=1000 a2=1000007 a3=4 items=0 ppid=1 pid=4967 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem" exe="/usr/bin/totem" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191585601.247:76): user pid=5094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191585661.212:77): user pid=5112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191586501.913:78): user pid=5818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191586501.915:79): avc:  denied  { search } for  pid=5818 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191586501.915:79): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2370 pid=5818 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191587401.529:80): user pid=6365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CHAUTHTOK msg=audit(1191587532.634:81): user pid=6509 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=wbpriv exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1191587567.129:82): user pid=6547 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1191587567.217:83): user pid=6548 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1191587567.225:84): user pid=6549 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1191587567.232:85): user pid=6550 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1191587736.774:86): user pid=6663 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191587736.774:87): user pid=6663 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191587736.831:88): user pid=6663 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1191580593.501:89): user pid=6744 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1191580593.749:90): user pid=6663 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1191580620.771:91): user pid=6791 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1191580623.703:92): user pid=6791 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191580623.710:93): user pid=6791 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1191580623.828:94): user pid=6791 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191580623.864:95): user pid=6791 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191580623.864:96): user pid=6791 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191580623.866:97): user pid=6791 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1191580633.050:98): user pid=6845 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=xfs exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1191580672.157:99): user pid=6934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191580672.157:100): user pid=6934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1191580672.180:101): user pid=6934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USYS_CONFIG msg=audit(1191580679.501:102): user pid=6994 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1191580679.733:103): user pid=6934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1191580680.502:104): user pid=6999 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191580680.503:105): user pid=6999 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1191580680.520:106): user pid=6999 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USYS_CONFIG msg=audit(1191580696.500:107): user pid=7091 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1191580696.728:108): user pid=6999 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1191580959.484:109): user pid=7566 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=nscd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1191581044.698:110): avc:  denied  { write } for  pid=10382 comm="load_policy" path="pipe:[505486]" dev=pipefs ino=505486 scontext=system_u:system_r:load_policy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1191581044.698:110): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaaccd2a0 a1=2aaaadee5cd0 a2=0 a3=0 items=0 ppid=10381 pid=10382 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1191581046.798:111): user pid=2042 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1191581044.867:112): policy loaded auid=500
>type=SYSCALL msg=audit(1191581044.867:112): arch=c000003e syscall=1 success=yes exit=3812809 a0=4 a1=2aaaab879000 a2=3a2dc9 a3=0 items=0 ppid=10381 pid=10382 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1191581068.123:113): user pid=2042 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=signal interface=com.redhat.SEtroubleshootdIface member=restart dest=org.freedesktop.DBus spid=10522 tpid=2946 scontext=system_u:system_r:rpm_script_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_ACCT msg=audit(1191581101.578:114): user pid=10532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191581101.581:115): avc:  denied  { search } for  pid=10532 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191581101.581:115): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2370 pid=10532 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1191581201.656:116): user pid=10635 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1191581201.736:117): user pid=10636 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_END msg=audit(1191581438.786:739): auditd normal halt, sending auid=500 pid=11059 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1836
>type=DAEMON_START msg=audit(1191581439.131:8777): auditd start, ver=1.6.2, format=raw, auid=500 pid=11075 res=success, auditd pid=11075
>type=CONFIG_CHANGE msg=audit(1191581439.231:121): audit_enabled=1 old=1 by auid=500 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1191581439.231:122): audit_enabled=1 old=1 by auid=500 res=1
>type=CONFIG_CHANGE msg=audit(1191581439.274:123): audit_backlog_limit=320 old=320 by auid=500 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1191581439.275:124): audit_backlog_limit=320 old=320 by auid=500 res=1
>type=AVC msg=audit(1191581481.421:125): avc:  denied  { write } for  pid=11275 comm="setsebool" path="pipe:[505486]" dev=pipefs ino=505486 scontext=system_u:system_r:setsebool_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1191581481.421:125): arch=c000003e syscall=59 success=yes exit=0 a0=6c84d0 a1=6c73e0 a2=6c68f0 a3=0 items=0 ppid=11274 pid=11275 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0 key=(null)
>type=USER_AVC msg=audit(1191581489.206:126): user pid=2042 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1191581499.406:127): avc:  denied  { write } for  pid=11291 comm="load_policy" path="pipe:[505486]" dev=pipefs ino=505486 scontext=system_u:system_r:load_policy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1191581499.406:127): arch=c000003e syscall=59 success=yes exit=0 a0=7c95e0 a1=2bb7380 a2=0 a3=2aaaab8c4220 items=0 ppid=11277 pid=11291 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1191581501.228:128): user pid=2042 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1191581499.573:129): policy loaded auid=500
>type=SYSCALL msg=audit(1191581499.573:129): arch=c000003e syscall=1 success=yes exit=3812809 a0=4 a1=2aaaab879000 a2=3a2dc9 a3=0 items=0 ppid=11277 pid=11291 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1191581501.993:130): user pid=11277 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=system_u new-role=? new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ROLE_CHANGE msg=audit(1191581502.370:131): user pid=11294 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1191581502.623:132): user pid=11295 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="guest_u" old-seuser=? old-role=? old-range=? new-seuser=guest_u new-role=guest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1191581502.847:133): user pid=11296 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="xguest_u" old-seuser=? old-role=? old-range=? new-seuser=xguest_u new-role=xguest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1191582001.956:134): user pid=11346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191582001.958:135): avc:  denied  { search } for  pid=11346 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191582001.958:135): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2370 pid=11346 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191582061.556:136): user pid=11352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191582901.726:137): user pid=11427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191583801.713:138): user pid=11498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191584701.380:139): user pid=11573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191584701.382:140): avc:  denied  { search } for  pid=11573 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191584701.382:140): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2370 pid=11573 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191584944.989:141): avc:  denied  { execstack } for  pid=11620 comm="totem-video-thu" scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=process
>type=AVC msg=audit(1191584944.989:141): avc:  denied  { execmem } for  pid=11620 comm="totem-video-thu" scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=process
>type=SYSCALL msg=audit(1191584944.989:141): arch=c000003e syscall=10 success=yes exit=0 a0=7fffe298a000 a1=1000 a2=1000007 a3=4 items=0 ppid=2870 pid=11620 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=AVC msg=audit(1191585264.529:142): avc:  denied  { signal } for  pid=2716 comm="gdm-binary" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:unconfined_execmem_t:s0 tclass=process
>type=SYSCALL msg=audit(1191585264.529:142): arch=c000003e syscall=62 success=yes exit=0 a0=fffff52f a1=f a2=0 a3=8 items=0 ppid=2648 pid=2716 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=0 sgid=500 fsgid=0 tty=(none) comm="gdm-binary" exe="/usr/sbin/gdm-binary" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1191585266.032:143): user pid=2716 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1191585266.033:144): user pid=2716 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1191585282.935:8778): auditd normal halt, sending auid=4294967295 pid=12153 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=11075
>type=DAEMON_START msg=audit(1191585386.057:2942): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1755 res=success, auditd pid=1755
>type=CONFIG_CHANGE msg=audit(1191585386.161:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1191585386.164:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1191585386.202:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1191585386.203:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1191585404.315:9): avc:  denied  { name_bind } for  pid=2069 comm="xinetd" src=119 scontext=system_u:system_r:inetd_t:s0 tcontext=system_u:object_r:innd_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1191585404.315:9): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7ffff58e51a0 a2=1c a3=0 items=0 ppid=1 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xinetd" exe="/usr/sbin/xinetd" subj=system_u:system_r:inetd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1191585466.630:10): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1191585466.683:11): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1191585466.684:12): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1191585466.689:13): login pid=2651 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1191585466.727:14): user pid=2651 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191585466.728:15): user pid=2651 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1191585466.729:16): user pid=2651 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1191585530.303:17): user pid=3028 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191585530.311:18): user pid=3028 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191585530.312:19): user pid=3028 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191585530.323:20): user pid=3028 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191585530.324:21): user pid=3028 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191585530.325:22): user pid=3028 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191585573.697:23): user pid=2651 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1191585573.698:24): user pid=2651 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1191585582.335:25): user pid=3116 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1191585582.345:26): user pid=3116 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1191585582.346:27): user pid=3116 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1191585582.349:28): login pid=3116 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1191585582.381:29): user pid=3116 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191585582.382:30): user pid=3116 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1191585582.383:31): user pid=3116 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1191585585.679:32): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3308 comm="escd" sig=11
>type=USER_ACCT msg=audit(1191585601.680:33): user pid=3386 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191585601.682:34): avc:  denied  { search } for  pid=3386 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191585601.682:34): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=3386 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1191585656.826:35): user pid=3398 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191585656.826:36): user pid=3398 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191585656.901:37): user pid=3398 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1191585658.533:38): avc:  denied  { read write } for  pid=3120 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=1146894 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1191585658.533:38): arch=c000003e syscall=30 success=yes exit=-804925440 a0=11800e a1=0 a2=0 a3=0 items=0 ppid=3116 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191585661.331:39): user pid=3404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191585742.883:40): user pid=2574 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1191585742.890:41): user pid=2574 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1191585742.894:42): login pid=2574 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1191585742.965:43): user pid=2574 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1191585742.975:44): user pid=2574 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1191585742.976:45): user pid=2574 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1191585742.980:46): user pid=2574 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1191585782.368:47): user pid=2574 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1191585782.371:48): user pid=2574 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1191586104.244:49): user pid=3767 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191586104.244:50): user pid=3767 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191586104.261:51): user pid=3767 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1191586104.850:52): avc:  denied  { read write } for  pid=3120 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=1376276 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1191586104.850:52): arch=c000003e syscall=30 success=yes exit=-802566144 a0=150014 a1=0 a2=0 a3=0 items=0 ppid=3116 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1191586107.494:53): user pid=3767 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1191586164.699:54): user pid=3777 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191586164.707:55): user pid=3777 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191586164.708:56): user pid=3777 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191586164.717:57): user pid=3777 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191586164.717:58): user pid=3777 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191586164.718:59): user pid=3777 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191586197.669:60): user pid=3398 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1191586202.344:61): user pid=3820 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191586202.345:62): user pid=3820 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191586202.360:63): user pid=3820 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191586501.699:64): user pid=3842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191586501.701:65): avc:  denied  { search } for  pid=3842 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191586501.701:65): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=3842 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1191586650.381:66): user pid=3820 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191587401.187:67): user pid=4000 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191587401.189:68): avc:  denied  { search } for  pid=4000 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191587401.189:68): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=4000 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191587880.399:69): avc:  denied  { execstack } for  pid=4240 comm="totem-video-thu" scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=process
>type=AVC msg=audit(1191587880.399:69): avc:  denied  { execmem } for  pid=4240 comm="totem-video-thu" scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=process
>type=SYSCALL msg=audit(1191587880.399:69): arch=c000003e syscall=10 success=yes exit=0 a0=7fffd9c53000 a1=1000 a2=1000007 a3=4 items=0 ppid=3278 pid=4240 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191588301.222:70): user pid=5052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589201.148:71): user pid=5857 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589201.151:72): user pid=5856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589261.322:73): user pid=5883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589261.324:74): user pid=5882 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589321.905:75): user pid=5898 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589381.849:76): user pid=5928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589441.930:77): user pid=5936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589501.807:78): user pid=5944 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589561.722:79): user pid=5964 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589621.028:80): user pid=5977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589681.182:81): user pid=5985 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589741.847:82): user pid=5998 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589801.668:83): user pid=6006 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589861.169:84): user pid=6024 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589921.026:85): user pid=6039 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191589981.625:86): user pid=6050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590041.257:87): user pid=6055 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590101.820:88): user pid=6069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590101.823:89): user pid=6068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590161.465:90): user pid=6094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590221.623:91): user pid=6123 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590281.689:92): user pid=6155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590341.424:93): user pid=6169 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590401.513:94): user pid=6178 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590461.595:95): user pid=6194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590521.676:96): user pid=6202 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590581.754:97): user pid=6237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590641.832:98): user pid=6245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590701.020:99): user pid=6254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590761.098:100): user pid=6284 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590821.860:101): user pid=6323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590881.876:102): user pid=6332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191590941.183:103): user pid=6347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591001.564:104): user pid=6371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191591001.566:105): avc:  denied  { search } for  pid=6371 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191591001.566:105): arch=c000003e syscall=80 success=yes exit=0 a0=698205 a1=698370 a2=0 a3=0 items=0 ppid=2301 pid=6371 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191591001.567:106): user pid=6370 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591061.894:107): user pid=6392 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591121.643:108): user pid=6404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591181.721:109): user pid=6429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591241.800:110): user pid=6449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191591245.343:111): user pid=6458 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191591245.343:112): user pid=6458 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191591245.365:113): user pid=6458 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1191591245.853:114): avc:  denied  { read write } for  pid=3120 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=4620314 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1191591245.853:114): arch=c000003e syscall=30 success=yes exit=-808599552 a0=46801a a1=0 a2=0 a3=0 items=0 ppid=3116 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191591301.877:115): user pid=6469 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591361.964:116): user pid=6490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591421.135:117): user pid=6507 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591481.419:118): user pid=6529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591541.538:119): user pid=6538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591601.579:120): user pid=6548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591661.602:121): user pid=6569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591721.597:122): user pid=6584 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591781.957:123): user pid=6594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591841.216:124): user pid=6628 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591901.818:125): user pid=6657 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191591901.819:126): user pid=6658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191591901.821:127): avc:  denied  { search } for  pid=6658 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191591901.821:127): arch=c000003e syscall=80 success=yes exit=0 a0=698205 a1=698370 a2=0 a3=0 items=0 ppid=2301 pid=6658 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191591961.850:128): user pid=6685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1191592019.121:129): user pid=6458 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191592021.929:130): user pid=6715 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592081.054:131): user pid=6726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592141.138:132): user pid=6738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592201.219:133): user pid=6753 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592261.302:134): user pid=6785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592321.859:135): user pid=6797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592381.546:136): user pid=6815 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592441.837:137): user pid=6823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592501.519:138): user pid=6833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592561.875:139): user pid=6856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592621.486:140): user pid=6885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592681.564:141): user pid=6895 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592741.641:142): user pid=6901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191592801.914:143): user pid=6918 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191592801.916:144): avc:  denied  { search } for  pid=6918 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191592801.916:144): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=6918 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191592861.947:145): user pid=6941 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191593701.032:146): user pid=7051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191594601.069:147): user pid=7192 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191595501.105:148): user pid=7287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191595802.245:149): user pid=7330 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191595802.295:150): user pid=7330 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191595802.298:151): login pid=7330 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1191595802.298:152): user pid=7330 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191595802.302:153): user pid=7333 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191595811.631:154): user pid=7330 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191595811.632:155): user pid=7330 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191595811.777:156): user pid=7358 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191595811.804:157): user pid=7358 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191595811.808:158): login pid=7358 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1191595811.808:159): user pid=7358 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191595811.812:160): user pid=7361 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191595965.903:161): user pid=7358 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191595965.904:162): user pid=7358 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191595966.460:163): user pid=7404 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191595966.490:164): user pid=7404 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191595966.494:165): login pid=7404 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1191595966.494:166): user pid=7404 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191595966.498:167): user pid=7407 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191595966.710:168): user pid=7404 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191595966.711:169): user pid=7404 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191595966.832:170): user pid=7431 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191595966.856:171): user pid=7431 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191595966.858:172): login pid=7431 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1191595966.859:173): user pid=7431 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191595966.863:174): user pid=7434 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191595967.009:175): user pid=7431 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191595967.010:176): user pid=7431 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_AUTH msg=audit(1191596170.680:177): user pid=7545 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191596170.689:178): user pid=7545 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1191596170.701:179): user pid=7545 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191596170.704:180): user pid=7545 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191596170.705:181): user pid=7545 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191596170.706:182): user pid=7545 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1191596212.885:183): user pid=7559 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191596212.887:184): user pid=7559 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191596212.887:185): user pid=7559 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191596212.888:186): user pid=7559 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1191596246.943:187): user pid=7562 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=polkituser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_ACCT msg=audit(1191596401.169:188): user pid=17635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191596401.171:189): avc:  denied  { search } for  pid=17635 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191596401.171:189): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=17635 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191596461.342:190): user pid=22111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191596489.775:191): user pid=22119 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191596489.831:192): user pid=22119 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191596489.835:193): login pid=22119 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191596489.836:194): user pid=22119 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191596489.839:195): user pid=22122 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191596490.278:196): user pid=22119 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191596490.279:197): user pid=22119 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191597301.439:198): user pid=22208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191597301.441:199): avc:  denied  { search } for  pid=22208 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191597301.441:199): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=22208 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191598201.479:200): user pid=22253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191599101.951:201): user pid=22299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191600001.989:202): user pid=22344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191600061.020:203): user pid=22352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191600901.067:204): user pid=22394 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191600901.069:205): avc:  denied  { search } for  pid=22394 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191600901.069:205): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=22394 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191601801.105:206): user pid=22437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191602701.140:207): user pid=22482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191603601.786:208): user pid=22544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191603661.817:209): user pid=22555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191604501.861:210): user pid=22601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191605401.898:211): user pid=22650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191606301.964:212): user pid=22699 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191607201.999:213): user pid=22751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191607261.029:214): user pid=22758 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191608101.072:215): user pid=22823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_LOGIN msg=audit(1191608836.183:216): user pid=22863 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.5, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1191608836.202:217): user pid=22863 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191608836.232:218): user pid=22863 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191608836.235:219): login pid=22863 uid=0 old auid=4294967295 new auid=10464
>type=USER_START msg=audit(1191608836.236:220): user pid=22863 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191608836.238:221): user pid=22866 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1191608836.281:222): user pid=22863 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=10464: exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1191609001.115:223): user pid=22914 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191609001.117:224): avc:  denied  { search } for  pid=22914 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191609001.117:224): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=22914 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191609901.152:225): user pid=22971 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191610801.188:226): user pid=23018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191610861.216:227): user pid=23025 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191611701.285:228): user pid=23072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191612601.321:229): user pid=23115 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191613501.358:230): user pid=23159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191614401.394:231): user pid=23204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191614461.425:232): user pid=23211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191615301.471:233): user pid=23255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191616201.525:234): user pid=23298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191617101.561:235): user pid=23342 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191618001.596:236): user pid=23387 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191618061.626:237): user pid=23394 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191618901.669:238): user pid=23437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191619308.471:239): user pid=23460 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191619308.546:240): user pid=23460 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191619308.549:241): login pid=23460 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191619308.550:242): user pid=23460 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191619308.553:243): user pid=23463 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1191619308.920:244): user pid=23460 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/2 res=success)'
>type=USER_AUTH msg=audit(1191619320.773:245): user pid=23505 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191619320.780:246): user pid=23505 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1191619320.844:247): user pid=23505 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1191619320.847:248): user pid=23505 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1191619320.847:249): user pid=23505 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1191619320.849:250): user pid=23505 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/bin/rpm" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191619801.706:251): user pid=23625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191619801.709:252): avc:  denied  { search } for  pid=23625 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191619801.709:252): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=23625 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191620701.745:253): user pid=23668 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191621601.782:254): user pid=23718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191621661.814:255): user pid=23725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191622501.865:256): user pid=23767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191623401.662:257): user pid=23811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191624301.697:258): user pid=23854 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191625202.004:259): user pid=23899 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191625261.035:260): user pid=23907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191626101.077:261): user pid=23949 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191627001.112:262): user pid=23992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191627333.133:263): user pid=24013 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191627333.159:264): user pid=24013 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191627333.162:265): login pid=24013 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191627333.163:266): user pid=24013 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191627333.166:267): user pid=24016 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1191627333.238:268): user pid=24013 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/3 res=success)'
>type=CRED_DISP msg=audit(1191627432.409:269): user pid=23460 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1191627432.410:270): user pid=23460 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191627901.149:271): user pid=24189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191627901.151:272): avc:  denied  { search } for  pid=24189 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191627901.151:272): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=24189 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1191628797.467:273): user pid=24013 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1191628797.468:274): user pid=24013 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191628801.379:275): user pid=24320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191628861.783:276): user pid=24328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191629217.724:277): user pid=24350 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191629217.876:278): user pid=24350 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191629217.908:279): login pid=24350 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191629217.909:280): user pid=24350 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191629217.912:281): user pid=24353 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1191629218.009:282): user pid=24350 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/2 res=success)'
>type=CRED_DISP msg=audit(1191629240.737:283): user pid=24350 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1191629240.739:284): user pid=24350 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191629701.135:285): user pid=24417 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191629701.137:286): avc:  denied  { search } for  pid=24417 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191629701.137:286): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=24417 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191630601.191:287): user pid=24460 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191631501.226:288): user pid=24504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191632401.260:289): user pid=24549 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191632461.289:290): user pid=24557 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191632761.330:291): user pid=24576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191632772.503:292): avc:  denied  { use } for  pid=24633 comm="vpnc" path="pipe:[2967994]" dev=pipefs ino=2967994 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1191632772.503:292): avc:  denied  { read } for  pid=24633 comm="vpnc" path="pipe:[2967994]" dev=pipefs ino=2967994 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=AVC msg=audit(1191632772.503:292): avc:  denied  { write } for  pid=24633 comm="vpnc" path="pipe:[2967995]" dev=pipefs ino=2967995 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191632772.503:292): arch=c000003e syscall=59 success=yes exit=0 a0=6c7050 a1=6c78d0 a2=713a40 a3=0 items=0 ppid=24608 pid=24633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191632772.689:293): avc:  denied  { ioctl } for  pid=24633 comm="vpnc" path="pipe:[2967994]" dev=pipefs ino=2967994 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191632772.689:293): arch=c000003e syscall=16 success=no exit=-22 a0=0 a1=5401 a2=7fff51a6eb90 a3=240 items=0 ppid=24608 pid=24633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191632772.689:294): avc:  denied  { getattr } for  pid=24633 comm="vpnc" path="pipe:[2967994]" dev=pipefs ino=2967994 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191632772.689:294): arch=c000003e syscall=5 success=yes exit=0 a0=0 a1=7fff51a6eaa0 a2=7fff51a6eaa0 a3=240 items=0 ppid=24608 pid=24633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191633301.163:295): user pid=24679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191633301.165:296): avc:  denied  { search } for  pid=24679 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191633301.165:296): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=24679 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191634201.202:297): user pid=24722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191635101.260:298): user pid=24766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191636001.295:299): user pid=24811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191636061.323:300): user pid=24819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191636121.364:301): user pid=24828 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191636901.370:302): user pid=24871 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191637801.406:303): user pid=24914 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191638701.441:304): user pid=24967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191639601.477:305): user pid=3861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191639601.479:306): avc:  denied  { search } for  pid=3861 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191639601.479:306): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=3861 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191639661.880:307): user pid=4055 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1191640449.600:308): user pid=7266 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1191640449.601:309): user pid=7266 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1191640449.709:310): user pid=7266 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1191640449.709:311): user pid=7266 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191640501.422:312): user pid=7307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191640501.424:313): avc:  denied  { search } for  pid=7307 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191640501.424:313): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=7307 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191641401.460:314): user pid=7365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191642301.497:315): user pid=7424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191643201.535:316): user pid=7484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191643261.564:317): user pid=7492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191644101.610:318): user pid=7549 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191645001.645:319): user pid=7607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191645901.684:320): user pid=7666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191646801.719:321): user pid=7726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191646861.748:322): user pid=7734 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191647701.793:323): user pid=7791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191648601.828:324): user pid=7849 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191649501.864:325): user pid=7908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191650401.900:326): user pid=7968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191650461.929:327): user pid=7976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191651301.974:328): user pid=8033 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191652202.010:329): user pid=8091 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191653101.045:330): user pid=8150 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191654001.081:331): user pid=8210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191654061.110:332): user pid=8218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191654601.152:333): user pid=8257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191654901.338:334): user pid=8304 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191654901.340:335): avc:  denied  { search } for  pid=8304 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191654901.340:335): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=8304 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191655801.375:336): user pid=8362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191656701.410:337): user pid=8421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191657601.445:338): user pid=8481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191657661.476:339): user pid=8489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191658501.518:340): user pid=8546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191659401.553:341): user pid=8604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191660301.587:342): user pid=8663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191661201.624:343): user pid=8723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191661261.652:344): user pid=8731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191662101.695:345): user pid=8788 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191663001.730:346): user pid=8846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191663901.766:347): user pid=8905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191664801.802:348): user pid=8965 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191664861.832:349): user pid=8973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191665701.876:350): user pid=9030 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191666601.911:351): user pid=9088 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191667501.947:352): user pid=9147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191668401.984:353): user pid=9207 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191668461.012:354): user pid=9215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191669301.058:355): user pid=9272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191670201.092:356): user pid=9330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191671101.127:357): user pid=9390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191672001.163:358): user pid=9450 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191672061.194:359): user pid=9458 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191672901.236:360): user pid=9517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191673801.273:361): user pid=9575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191674701.308:362): user pid=9634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191675601.344:363): user pid=9694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191675661.373:364): user pid=9702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191676501.418:365): user pid=9759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191676525.203:366): user pid=9766 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191676525.293:367): user pid=9766 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191676525.296:368): login pid=9766 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191676525.297:369): user pid=9766 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191676525.300:370): user pid=9769 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1191676525.455:371): user pid=9766 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/2 res=success)'
>type=CRED_DISP msg=audit(1191676714.856:372): user pid=9766 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1191676714.857:373): user pid=9766 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191677401.454:374): user pid=9873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191678301.492:375): user pid=9932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191678301.493:376): avc:  denied  { search } for  pid=9932 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191678301.493:376): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=9932 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191679201.528:377): user pid=9992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191679261.557:378): user pid=10000 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191680101.602:379): user pid=10058 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191681001.638:380): user pid=10116 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191681901.674:381): user pid=10175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191682801.708:382): user pid=10235 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191682861.741:383): user pid=10243 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191683701.784:384): user pid=10300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191684601.819:385): user pid=10358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191685501.854:386): user pid=10417 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191686401.889:387): user pid=10477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191686461.918:388): user pid=10485 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191687301.960:389): user pid=10542 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191688201.995:390): user pid=10600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191689101.030:391): user pid=10658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191690001.066:392): user pid=10719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191690061.096:393): user pid=10727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191690901.138:394): user pid=10783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191691801.174:395): user pid=10842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191692701.209:396): user pid=10900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191693601.246:397): user pid=10961 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191693661.276:398): user pid=10969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191694501.318:399): user pid=11025 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191695401.352:400): user pid=11084 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191696301.387:401): user pid=11142 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191697201.423:402): user pid=11203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191697261.453:403): user pid=11211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191698101.496:404): user pid=11267 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191699001.532:405): user pid=11326 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191699901.567:406): user pid=11384 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191700801.602:407): user pid=11445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191700861.633:408): user pid=11453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191701701.675:409): user pid=11509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191702601.710:410): user pid=11568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191703501.745:411): user pid=11626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191704401.780:412): user pid=11687 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191704461.808:413): user pid=11695 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191705301.852:414): user pid=11751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191706201.887:415): user pid=11810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191706290.343:416): user pid=11820 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191706290.367:417): user pid=11820 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191706290.370:418): login pid=11820 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191706290.370:419): user pid=11820 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191706290.373:420): user pid=11823 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1191706290.420:421): user pid=11820 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/2 res=success)'
>type=USER_AUTH msg=audit(1191706420.449:422): user pid=11889 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191706420.458:423): user pid=11889 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1191706420.459:424): user pid=11889 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1191706420.467:425): user pid=11889 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1191706420.467:426): user pid=11889 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1191706420.469:427): user pid=11889 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=AVC msg=audit(1191706429.698:428): avc:  denied  { use } for  pid=11952 comm="vpnc" path="/dev/pts/2" dev=devpts ino=4 scontext=system_u:system_r:vpnc_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=fd
>type=SYSCALL msg=audit(1191706429.698:428): arch=c000003e syscall=59 success=yes exit=0 a0=6c8850 a1=6c9100 a2=713940 a3=0 items=0 ppid=11927 pid=11952 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1191706814.949:429): user pid=12108 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191706814.957:430): user pid=12108 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1191706814.958:431): user pid=12108 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1191706814.969:432): user pid=12108 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1191706814.969:433): user pid=12108 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1191706814.970:434): user pid=12108 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1191706899.181:435): user pid=12156 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1191706899.188:436): user pid=12156 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1191706899.188:437): user pid=12156 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1191706899.189:438): user pid=12156 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191707101.924:439): user pid=12258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191707101.926:440): avc:  denied  { search } for  pid=12258 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191707101.926:440): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=12258 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1191707254.457:441): user pid=12292 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191707254.464:442): user pid=12292 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1191707254.464:443): user pid=12292 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1191707254.473:444): user pid=12292 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1191707254.473:445): user pid=12292 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1191707254.474:446): user pid=12292 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1191707295.251:447): user pid=12369 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)'
>type=USER_AUTH msg=audit(1191707297.170:448): user pid=12369 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1191707297.178:449): user pid=12369 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1191707297.211:450): user pid=12369 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1191707297.216:451): user pid=12369 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1191707297.217:452): user pid=12369 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_CMD msg=audit(1191707297.218:453): user pid=12369 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1191707321.927:454): user pid=11820 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1191707321.928:455): user pid=11820 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191708001.409:456): user pid=12457 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191708001.411:457): avc:  denied  { search } for  pid=12457 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191708001.411:457): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=12457 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191708061.446:458): user pid=12465 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191708901.495:459): user pid=12521 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191709801.533:460): user pid=12579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191710701.569:461): user pid=12638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191711601.606:462): user pid=12698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191711661.636:463): user pid=12707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191712501.678:464): user pid=12763 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191713401.716:465): user pid=12821 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191714301.754:466): user pid=12880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191715201.789:467): user pid=12940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191715261.887:468): user pid=12948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191716101.090:469): user pid=13005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191717001.126:470): user pid=13063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191717901.161:471): user pid=13122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191718801.196:472): user pid=13198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191718861.227:473): user pid=13206 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191719161.829:474): user pid=13231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191719172.492:475): avc:  denied  { use } for  pid=13289 comm="vpnc" path="pipe:[8493226]" dev=pipefs ino=8493226 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1191719172.492:475): avc:  denied  { read } for  pid=13289 comm="vpnc" path="pipe:[8493226]" dev=pipefs ino=8493226 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=AVC msg=audit(1191719172.492:475): avc:  denied  { write } for  pid=13289 comm="vpnc" path="pipe:[8493227]" dev=pipefs ino=8493227 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191719172.492:475): arch=c000003e syscall=59 success=yes exit=0 a0=6c7050 a1=6c78d0 a2=713a40 a3=0 items=0 ppid=13264 pid=13289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191719172.535:476): avc:  denied  { ioctl } for  pid=13289 comm="vpnc" path="pipe:[8493226]" dev=pipefs ino=8493226 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191719172.535:476): arch=c000003e syscall=16 success=no exit=-22 a0=0 a1=5401 a2=7fffa5df8540 a3=240 items=0 ppid=13264 pid=13289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191719172.535:477): avc:  denied  { getattr } for  pid=13289 comm="vpnc" path="pipe:[8493226]" dev=pipefs ino=8493226 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191719172.535:477): arch=c000003e syscall=5 success=yes exit=0 a0=0 a1=7fffa5df8450 a2=7fffa5df8450 a3=240 items=0 ppid=13264 pid=13289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191719701.912:478): user pid=13343 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191719701.914:479): avc:  denied  { search } for  pid=13343 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191719701.914:479): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=13343 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191720601.952:480): user pid=13401 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191721501.019:481): user pid=13460 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191722401.053:482): user pid=13520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191722461.081:483): user pid=13528 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191722521.120:484): user pid=13538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191723301.127:485): user pid=13595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191723721.159:486): user pid=13625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191724201.163:487): user pid=13663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191725101.198:488): user pid=13722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1191725787.359:489): user pid=14358 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1191725787.359:490): user pid=14358 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1191725787.852:491): user pid=14358 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1191725787.852:492): user pid=14358 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191726001.492:493): user pid=14412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191726001.494:494): avc:  denied  { search } for  pid=14412 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191726001.494:494): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=14412 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191726061.557:495): user pid=14420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191726901.621:496): user pid=28343 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191727801.835:497): user pid=16398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191728701.894:498): user pid=16458 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191729601.927:499): user pid=16518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191729661.957:500): user pid=16526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191730502.001:501): user pid=16583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191731401.036:502): user pid=16641 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191732301.071:503): user pid=16700 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191733201.106:504): user pid=16760 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191733261.135:505): user pid=16768 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191734101.178:506): user pid=16825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191735001.215:507): user pid=16883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191735901.250:508): user pid=16942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191736801.287:509): user pid=17002 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191736861.317:510): user pid=17010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191737701.361:511): user pid=17068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191738601.395:512): user pid=17126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191739501.429:513): user pid=17185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191740401.464:514): user pid=17245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191740461.495:515): user pid=17253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191741001.536:516): user pid=17292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191741301.687:517): user pid=17335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191741301.688:518): avc:  denied  { search } for  pid=17335 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191741301.688:518): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=17335 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191742201.724:519): user pid=17393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191743101.758:520): user pid=17452 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191744001.793:521): user pid=17512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191744061.823:522): user pid=17520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191744901.867:523): user pid=17577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191745801.902:524): user pid=17635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191746701.937:525): user pid=17694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191747560.167:526): user pid=17750 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191747560.346:527): user pid=17750 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191747560.350:528): login pid=17750 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191747560.350:529): user pid=17750 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191747560.353:530): user pid=17757 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1191747563.916:531): user pid=17750 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/2 res=success)'
>type=USER_ACCT msg=audit(1191747601.977:532): user pid=17799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1191747660.014:533): user pid=17750 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1191747660.015:534): user pid=17750 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191747662.007:535): user pid=17810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191748501.052:536): user pid=17867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191748501.053:537): avc:  denied  { search } for  pid=17867 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191748501.053:537): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=17867 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191749401.089:538): user pid=17925 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191750301.174:539): user pid=17984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191751201.265:540): user pid=18044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191751261.308:541): user pid=18052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191752101.349:542): user pid=18109 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191753001.384:543): user pid=18167 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191753901.419:544): user pid=18226 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191754801.475:545): user pid=18286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191754861.503:546): user pid=18294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191755701.546:547): user pid=18351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191756601.580:548): user pid=18409 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191757501.613:549): user pid=18468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191758401.648:550): user pid=18528 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191758461.677:551): user pid=18536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191759301.886:552): user pid=18593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191760201.921:553): user pid=18651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191761101.956:554): user pid=18710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191762001.991:555): user pid=18770 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191762061.019:556): user pid=18778 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191762901.063:557): user pid=18835 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191763801.097:558): user pid=18893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191764701.950:559): user pid=18952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191765601.988:560): user pid=19012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191765661.018:561): user pid=19020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191766501.061:562): user pid=19077 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191767401.129:563): user pid=19135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191768301.164:564): user pid=19194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191769201.199:565): user pid=19254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191769261.229:566): user pid=19262 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191770101.273:567): user pid=19319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191771001.307:568): user pid=19377 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191771901.343:569): user pid=19436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191772801.378:570): user pid=19496 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191772861.407:571): user pid=19504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191773701.449:572): user pid=19561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191774601.484:573): user pid=19619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191775501.519:574): user pid=19677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191776401.554:575): user pid=19738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191776461.584:576): user pid=19746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191777301.628:577): user pid=19802 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191778201.662:578): user pid=19861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191779101.695:579): user pid=19919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191780001.756:580): user pid=19980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191780061.786:581): user pid=19988 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191780901.826:582): user pid=20044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191781801.861:583): user pid=20104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191782701.897:584): user pid=20162 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191783601.932:585): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191783661.962:586): user pid=20231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191784502.007:587): user pid=20287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191785401.044:588): user pid=20348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191786301.080:589): user pid=20406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191787201.116:590): user pid=20467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191787261.147:591): user pid=20475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191788101.189:592): user pid=20531 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191788746.962:593): user pid=20575 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191788746.987:594): user pid=20575 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191788746.990:595): login pid=20575 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191788746.991:596): user pid=20575 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191788746.993:597): user pid=20578 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1191788747.068:598): user pid=20575 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/2 res=success)'
>type=USER_ACCT msg=audit(1191788886.098:599): user pid=20632 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191788886.118:600): user pid=20632 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191788886.121:601): login pid=20632 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191788886.121:602): user pid=20632 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191788886.124:603): user pid=20635 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191788890.517:604): user pid=20632 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1191788890.518:605): user pid=20632 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191788917.233:606): user pid=20575 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1191788917.234:607): user pid=20575 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191788965.001:608): user pid=20680 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191788965.016:609): user pid=20680 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191788965.019:610): login pid=20680 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191788965.019:611): user pid=20680 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191788965.022:612): user pid=20683 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191788966.735:613): user pid=20680 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1191788966.736:614): user pid=20680 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191789001.226:615): user pid=20718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191789001.228:616): avc:  denied  { search } for  pid=20718 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191789001.228:616): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=20718 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191789901.263:617): user pid=20776 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191790579.174:618): user pid=20822 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191790579.192:619): user pid=20822 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191790579.195:620): login pid=20822 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191790579.195:621): user pid=20822 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191790579.198:622): user pid=20825 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191790579.426:623): user pid=20822 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1191790579.427:624): user pid=20822 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191790580.034:625): user pid=20856 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191790580.048:626): user pid=20856 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191790580.051:627): login pid=20856 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191790580.051:628): user pid=20856 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191790580.054:629): user pid=20859 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191790580.282:630): user pid=20856 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1191790580.283:631): user pid=20856 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191790801.301:632): user pid=20909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191790801.303:633): avc:  denied  { search } for  pid=20909 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191790801.303:633): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=20909 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191790861.333:634): user pid=20917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191791701.381:635): user pid=20973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191792601.416:636): user pid=21032 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191793501.451:637): user pid=21090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191794401.487:638): user pid=21154 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191794461.517:639): user pid=21162 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191795301.561:640): user pid=21218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191796201.624:641): user pid=21277 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191797101.657:642): user pid=21335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191798001.691:643): user pid=21395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191798061.720:644): user pid=21404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191798901.765:645): user pid=21460 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191799801.800:646): user pid=21518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191800701.835:647): user pid=21577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191801601.869:648): user pid=21637 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191801661.900:649): user pid=21646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191802501.944:650): user pid=21702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191803401.978:651): user pid=21760 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191804301.013:652): user pid=21819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191805201.048:653): user pid=21879 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191805261.078:654): user pid=21887 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191805561.117:655): user pid=21912 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191805571.941:656): avc:  denied  { use } for  pid=21970 comm="vpnc" path="pipe:[13907495]" dev=pipefs ino=13907495 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1191805571.941:656): avc:  denied  { read } for  pid=21970 comm="vpnc" path="pipe:[13907495]" dev=pipefs ino=13907495 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=AVC msg=audit(1191805571.941:656): avc:  denied  { write } for  pid=21970 comm="vpnc" path="pipe:[13907496]" dev=pipefs ino=13907496 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191805571.941:656): arch=c000003e syscall=59 success=yes exit=0 a0=6c7050 a1=6c78d0 a2=713a40 a3=0 items=0 ppid=21945 pid=21970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191805572.085:657): avc:  denied  { ioctl } for  pid=21970 comm="vpnc" path="pipe:[13907495]" dev=pipefs ino=13907495 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191805572.085:657): arch=c000003e syscall=16 success=no exit=-22 a0=0 a1=5401 a2=7fffca3af850 a3=240 items=0 ppid=21945 pid=21970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191805572.085:658): avc:  denied  { getattr } for  pid=21970 comm="vpnc" path="pipe:[13907495]" dev=pipefs ino=13907495 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191805572.085:658): arch=c000003e syscall=5 success=yes exit=0 a0=0 a1=7fffca3af760 a2=7fffca3af760 a3=240 items=0 ppid=21945 pid=21970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191806101.092:659): user pid=22024 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191806101.094:660): avc:  denied  { search } for  pid=22024 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191806101.094:660): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=22024 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191807001.133:661): user pid=22082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191807901.170:662): user pid=22141 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191808801.203:663): user pid=22203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191808861.232:664): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191808921.273:665): user pid=22222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191809701.280:666): user pid=22278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191810601.315:667): user pid=22336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191811501.351:668): user pid=22395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1191812103.313:669): user pid=23018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1191812103.314:670): user pid=23018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1191812103.717:671): user pid=23018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1191812103.717:672): user pid=23018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191812401.041:673): user pid=23078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191812401.043:674): avc:  denied  { search } for  pid=23078 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191812401.043:674): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=23078 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191812461.073:675): user pid=23086 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191813301.120:676): user pid=23143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191814201.154:677): user pid=23201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191815101.192:678): user pid=23261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191816001.229:679): user pid=23321 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191816061.258:680): user pid=23329 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191816901.300:681): user pid=23387 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191817801.334:682): user pid=23445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191818701.377:683): user pid=23504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191819601.412:684): user pid=23569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191819661.443:685): user pid=23580 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191820501.550:686): user pid=23645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191821401.586:687): user pid=23703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191822301.622:688): user pid=23762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191823201.658:689): user pid=23862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191823201.659:690): avc:  denied  { search } for  pid=23862 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191823201.659:690): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=23862 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191823261.689:691): user pid=23870 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191824101.731:692): user pid=23933 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191825001.766:693): user pid=23997 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191825901.800:694): user pid=24065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191826801.841:695): user pid=24127 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191826861.871:696): user pid=24135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191827401.913:697): user pid=24175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191827701.060:698): user pid=24218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191828601.095:699): user pid=24281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191829501.130:700): user pid=24353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191829618.747:701): user pid=24371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191829618.748:702): user pid=24371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191829618.822:703): user pid=24371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1191829621.124:704): avc:  denied  { read write } for  pid=3120 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=5373965 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1191829621.124:704): arch=c000003e syscall=30 success=yes exit=-810565632 a0=52000d a1=0 a2=0 a3=2aaaab6bc9f0 items=0 ppid=3116 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1191829799.653:705): user pid=24371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1191829803.348:706): user pid=24432 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191829803.349:707): user pid=24432 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191829803.364:708): user pid=24432 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1191829805.373:709): avc:  denied  { read write } for  pid=3120 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=5439499 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1191829805.373:709): arch=c000003e syscall=30 success=yes exit=-811352064 a0=53000b a1=0 a2=0 a3=2aaaab6bc9f0 items=0 ppid=3116 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191830401.167:710): user pid=24479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191830401.169:711): avc:  denied  { search } for  pid=24479 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191830401.169:711): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=24479 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191830461.232:712): user pid=24487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191831301.277:713): user pid=24549 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191832201.863:714): user pid=24613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CHAUTHTOK msg=audit(1191832527.380:715): user pid=24918 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=wbpriv exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1191832571.233:716): user pid=25077 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=nscd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1191833048.722:717): avc:  denied  { write } for  pid=28151 comm="load_policy" path="pipe:[15442865]" dev=pipefs ino=15442865 scontext=system_u:system_r:load_policy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1191833048.722:717): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaaccd2a0 a1=2aaaaded21f0 a2=0 a3=0 items=0 ppid=28147 pid=28151 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1191833051.143:718): user pid=1971 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1191833048.888:719): policy loaded auid=500
>type=SYSCALL msg=audit(1191833048.888:719): arch=c000003e syscall=1 success=yes exit=3815770 a0=4 a1=2aaaab879000 a2=3a395a a3=0 items=0 ppid=28147 pid=28151 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1191833067.545:720): user pid=28213 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1191833101.585:721): user pid=28242 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191833101.587:722): avc:  denied  { search } for  pid=28242 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191833101.587:722): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=28242 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1191833177.583:723): user pid=28283 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1191833177.601:724): user pid=28284 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1191833227.245:725): avc:  denied  { write } for  pid=28360 comm="setsebool" path="pipe:[15442865]" dev=pipefs ino=15442865 scontext=system_u:system_r:setsebool_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1191833227.245:725): arch=c000003e syscall=59 success=yes exit=0 a0=6c6ca0 a1=6c5b40 a2=6c55a0 a3=0 items=0 ppid=28359 pid=28360 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0 key=(null)
>type=USER_AVC msg=audit(1191833235.372:726): user pid=1971 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1191833244.758:727): avc:  denied  { write } for  pid=28363 comm="load_policy" path="pipe:[15442865]" dev=pipefs ino=15442865 scontext=system_u:system_r:load_policy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1191833244.758:727): arch=c000003e syscall=59 success=yes exit=0 a0=7c40f0 a1=2af9e60 a2=0 a3=2aaaab8c4220 items=0 ppid=28362 pid=28363 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1191833247.116:728): user pid=1971 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1191833244.914:729): policy loaded auid=500
>type=SYSCALL msg=audit(1191833244.914:729): arch=c000003e syscall=1 success=yes exit=3815770 a0=4 a1=2aaaab879000 a2=3a395a a3=0 items=0 ppid=28362 pid=28363 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1191833247.791:730): user pid=28362 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=system_u new-role=? new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ROLE_CHANGE msg=audit(1191833248.058:731): user pid=28365 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1191833248.312:732): user pid=28366 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="guest_u" old-seuser=? old-role=? old-range=? new-seuser=guest_u new-role=guest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1191833248.541:733): user pid=28367 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="xguest_u" old-seuser=? old-role=? old-range=? new-seuser=xguest_u new-role=xguest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1191833249.212:734): avc:  denied  { write } for  pid=28372 comm="setsebool" path="pipe:[15442865]" dev=pipefs ino=15442865 scontext=system_u:system_r:setsebool_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1191833249.212:734): arch=c000003e syscall=59 success=yes exit=0 a0=6c6ca0 a1=6c5b40 a2=6c55a0 a3=0 items=0 ppid=28371 pid=28372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0 key=(null)
>type=USER_AVC msg=audit(1191833257.251:735): user pid=1971 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1191833266.188:736): avc:  denied  { write } for  pid=28380 comm="load_policy" path="pipe:[15442865]" dev=pipefs ino=15442865 scontext=system_u:system_r:load_policy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1191833266.188:736): arch=c000003e syscall=59 success=yes exit=0 a0=7c40f0 a1=2af9e60 a2=0 a3=2aaaab8c4220 items=0 ppid=28374 pid=28380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1191833268.549:737): user pid=1971 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1191833266.346:738): policy loaded auid=500
>type=SYSCALL msg=audit(1191833266.346:738): arch=c000003e syscall=1 success=yes exit=3815770 a0=4 a1=2aaaab879000 a2=3a395a a3=0 items=0 ppid=28374 pid=28380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1191833269.165:739): user pid=28374 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=system_u new-role=? new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ROLE_CHANGE msg=audit(1191833269.420:740): user pid=28382 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1191833269.647:741): user pid=28383 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="guest_u" old-seuser=? old-role=? old-range=? new-seuser=guest_u new-role=guest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1191833269.875:742): user pid=28384 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="xguest_u" old-seuser=? old-role=? old-range=? new-seuser=xguest_u new-role=xguest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1191833364.302:743): user pid=28498 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191833364.312:744): user pid=28498 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1191833364.314:745): user pid=28498 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1191833364.360:746): user pid=28498 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1191833364.360:747): user pid=28498 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1191833364.362:748): user pid=28498 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191834002.356:749): user pid=28884 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191834002.359:750): avc:  denied  { search } for  pid=28884 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191834002.359:750): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=28884 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191834006.606:751): avc:  denied  { read write } for  pid=2151 comm="rpc.mountd" name="control" dev=tmpfs ino=284 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191834006.606:751): arch=c000003e syscall=2 success=yes exit=11 a0=7fff3bf1bdd0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191834006.607:752): avc:  denied  { ioctl } for  pid=2151 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=284 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191834006.607:752): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c138fd00 a2=2aaaaaced840 a3=0 items=0 ppid=1 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191834006.619:753): avc:  denied  { read } for  pid=2151 comm="rpc.mountd" name="vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191834006.619:753): arch=c000003e syscall=2 success=yes exit=12 a0=2aaaaace9310 a1=0 a2=ffffffff80000000 a3=b758ae2 items=0 ppid=1 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191834006.619:754): avc:  denied  { ioctl } for  pid=2151 comm="rpc.mountd" path="/dev/mapper/vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191834006.619:754): arch=c000003e syscall=16 success=yes exit=0 a0=c a1=80081272 a2=7fff3bf1b9a8 a3=0 items=0 ppid=1 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191834008.241:755): avc:  denied  { getattr } for  pid=2151 comm="rpc.mountd" path="/dev/kvm" dev=tmpfs ino=5288 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191834008.241:755): arch=c000003e syscall=4 success=yes exit=0 a0=7fff3bf1d570 a1=7fff3bf1d4d0 a2=7fff3bf1d4d0 a3=2aaaab6469f0 items=0 ppid=1 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191834008.291:756): avc:  denied  { read } for  pid=2151 comm="rpc.mountd" name="root" dev=tmpfs ino=336 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191834008.291:756): arch=c000003e syscall=2 success=yes exit=12 a0=2aaaaaceca20 a1=0 a2=46f284b4 a3=15ba0bda items=0 ppid=1 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191834026.730:757): avc:  denied  { ioctl } for  pid=2151 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=284 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191834026.730:757): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c138fd02 a2=2aaaaaced840 a3=2aaaaba77b49 items=0 ppid=1 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191834026.742:758): avc:  denied  { ioctl } for  pid=2151 comm="rpc.mountd" path="/dev/mapper/vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191834026.742:758): arch=c000003e syscall=16 success=yes exit=0 a0=c a1=80081272 a2=7fff3bf1b9a8 a3=12d9a2ac items=0 ppid=1 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191834061.273:759): user pid=29058 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=DAEMON_END msg=audit(1191834164.469:2943): auditd normal halt, sending auid=500 pid=29093 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1755
>type=DAEMON_START msg=audit(1191834167.376:637): auditd start, ver=1.6.2, format=raw, auid=500 pid=29110 res=success, auditd pid=29110
>type=CONFIG_CHANGE msg=audit(1191834167.475:763): audit_enabled=1 old=1 by auid=500 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1191834167.475:764): audit_enabled=1 old=1 by auid=500 res=1
>type=CONFIG_CHANGE msg=audit(1191834167.556:765): audit_backlog_limit=320 old=320 by auid=500 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1191834167.556:766): audit_backlog_limit=320 old=320 by auid=500 res=1
>type=USER_ACCT msg=audit(1191834901.855:767): user pid=29276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191834902.155:768): avc:  denied  { search } for  pid=29276 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191834902.155:768): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2301 pid=29276 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191835033.801:769): avc:  denied  { signal } for  pid=3116 comm="gdm-binary" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=process
>type=AVC msg=audit(1191835033.801:769): avc:  denied  { signal } for  pid=3116 comm="gdm-binary" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:unconfined_execmem_t:s0 tclass=process
>type=SYSCALL msg=audit(1191835033.801:769): arch=c000003e syscall=62 success=yes exit=0 a0=fffff3b2 a1=f a2=0 a3=8 items=0 ppid=2580 pid=3116 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=0 sgid=500 fsgid=0 tty=(none) comm="gdm-binary" exe="/usr/sbin/gdm-binary" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1191835036.912:770): user pid=3116 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1191835036.913:771): user pid=3116 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1191835049.589:772): user pid=22863 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_END msg=audit(1191835049.591:773): user pid=22863 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=DAEMON_END msg=audit(1191835056.885:638): auditd normal halt, sending auid=4294967295 pid=29783 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=29110
>type=DAEMON_START msg=audit(1191835153.173:4250): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1755 res=success, auditd pid=1755
>type=CONFIG_CHANGE msg=audit(1191835153.277:8): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1191835153.281:9): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1191835153.366:10): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1191835153.366:11): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1191835166.203:12): avc:  denied  { name_bind } for  pid=2071 comm="xinetd" src=119 scontext=system_u:system_r:inetd_t:s0 tcontext=system_u:object_r:innd_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1191835166.203:12): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fffb71dcca0 a2=1c a3=0 items=0 ppid=1 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xinetd" exe="/usr/sbin/xinetd" subj=system_u:system_r:inetd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1191835233.746:13): user pid=2568 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1191835233.782:14): user pid=2568 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1191835233.789:15): login pid=2568 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1191835233.862:16): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1191835233.874:17): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1191835233.875:18): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1191835233.877:19): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1191835369.070:20): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1191835369.075:21): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1191835381.853:22): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1191835381.863:23): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1191835381.864:24): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1191835381.868:25): login pid=2640 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1191835381.910:26): user pid=2640 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191835381.973:27): user pid=2640 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1191835381.975:28): user pid=2640 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1191835435.768:29): user pid=3297 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191835435.776:30): user pid=3297 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191835435.777:31): user pid=3297 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191835435.786:32): user pid=3297 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191835435.786:33): user pid=3297 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191835435.788:34): user pid=3297 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191835801.220:35): user pid=3474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191835801.223:36): avc:  denied  { search } for  pid=3474 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191835801.223:36): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=3474 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191836559.750:37): user pid=3811 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191836559.783:38): user pid=3811 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191836559.787:39): login pid=3811 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1191836559.788:40): user pid=3811 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191836559.796:41): user pid=3814 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191836565.447:42): user pid=3811 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191836565.448:43): user pid=3811 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191836565.591:44): user pid=3838 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191836565.619:45): user pid=3838 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191836565.622:46): login pid=3838 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1191836565.623:47): user pid=3838 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191836565.627:48): user pid=3841 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191836701.815:49): user pid=3931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191836701.818:50): avc:  denied  { search } for  pid=3931 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191836701.818:50): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=3931 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1191836731.184:51): user pid=3838 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191836731.185:52): user pid=3838 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191836731.852:53): user pid=3935 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191836731.882:54): user pid=3935 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191836731.885:55): login pid=3935 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1191836731.886:56): user pid=3935 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191836731.889:57): user pid=3938 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191836732.041:58): user pid=3935 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191836732.043:59): user pid=3935 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191836732.204:60): user pid=3962 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191836732.231:61): user pid=3962 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191836732.234:62): login pid=3962 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1191836732.234:63): user pid=3962 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191836732.238:64): user pid=3965 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191836732.353:65): user pid=3962 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191836732.354:66): user pid=3962 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191837601.315:67): user pid=4016 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191837601.317:68): avc:  denied  { search } for  pid=4016 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191837601.317:68): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=4016 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191837661.049:69): user pid=4022 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191838501.200:70): user pid=4060 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191838501.201:71): avc:  denied  { search } for  pid=4060 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191838501.201:71): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=4060 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191839401.049:72): user pid=4092 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191840301.372:73): user pid=4136 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191841201.517:74): user pid=4166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191841261.292:75): user pid=4172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191842101.336:76): user pid=4208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191842951.410:77): user pid=4236 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=88.146.35.25, addr=88.146.35.25, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191842951.434:78): user pid=4236 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=88.146.35.25, addr=88.146.35.25, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191842951.437:79): login pid=4236 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191842951.437:80): user pid=4236 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=88.146.35.25, addr=88.146.35.25, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191842951.440:81): user pid=4239 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=88.146.35.25, addr=88.146.35.25, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1191842951.736:82): user pid=4236 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=88.146.35.25, addr=88.146.35.25, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1191843001.659:83): user pid=4294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191843001.661:84): avc:  denied  { search } for  pid=4294 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191843001.661:84): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=4294 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1191843743.943:85): user pid=4236 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=88.146.35.25, addr=88.146.35.25, terminal=ssh res=success)'
>type=USER_END msg=audit(1191843743.944:86): user pid=4236 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=88.146.35.25, addr=88.146.35.25, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191843901.593:87): user pid=4333 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191844801.486:88): user pid=4361 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191844861.904:89): user pid=4367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191845701.952:90): user pid=4399 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191846601.460:91): user pid=4430 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191847501.435:92): user pid=4462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191848401.957:93): user pid=4498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191848401.958:94): user pid=4499 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191848461.778:95): user pid=4510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191848461.782:96): user pid=4509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191848521.856:97): user pid=4521 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191848581.952:98): user pid=4527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191848641.302:99): user pid=4537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191848701.383:100): user pid=4546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191848761.464:101): user pid=4556 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191848821.544:102): user pid=4563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191848881.620:103): user pid=4569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191848941.697:104): user pid=4576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849001.776:105): user pid=4583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849061.855:106): user pid=4590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849121.967:107): user pid=4596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849181.048:108): user pid=4602 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849241.207:109): user pid=4612 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849301.323:110): user pid=4621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849301.324:111): user pid=4622 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849361.314:112): user pid=4632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849421.392:113): user pid=4638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849481.471:114): user pid=4644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849541.550:115): user pid=4651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849601.631:116): user pid=4660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849661.709:117): user pid=4667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849721.798:118): user pid=4673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849781.876:119): user pid=4679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849841.952:120): user pid=4686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849901.030:121): user pid=4693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191849961.110:122): user pid=4700 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850021.191:123): user pid=4706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850081.290:124): user pid=4712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850141.368:125): user pid=4719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850201.457:126): user pid=4726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850201.458:127): user pid=4727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850261.524:128): user pid=4737 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850321.603:129): user pid=4743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850381.680:130): user pid=4749 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850441.768:131): user pid=4762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850501.847:132): user pid=4769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850561.926:133): user pid=4777 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850622.004:134): user pid=4784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850681.086:135): user pid=4790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850741.163:136): user pid=4797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850801.241:137): user pid=4804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850861.322:138): user pid=4811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850921.399:139): user pid=4817 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191850981.478:140): user pid=4823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851041.556:141): user pid=4830 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851101.637:142): user pid=4837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851101.639:143): user pid=4838 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851161.084:144): user pid=4848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851221.164:145): user pid=4854 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851281.240:146): user pid=4860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851341.318:147): user pid=4867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851401.811:148): user pid=4874 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851461.888:149): user pid=4881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851521.970:150): user pid=4887 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851581.046:151): user pid=4896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191851617.386:152): avc:  denied  { name_connect } for  pid=2317 comm="squid" dest=8000 scontext=system_u:system_r:squid_t:s0 tcontext=system_u:object_r:soundd_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1191851617.386:152): arch=c000003e syscall=42 success=no exit=-115 a0=e a1=c3bcf4 a2=10 a3=90bfe0 items=0 ppid=2315 pid=2317 auid=4294967295 uid=23 gid=23 euid=23 suid=0 fsuid=23 egid=23 sgid=23 fsgid=23 tty=(none) comm="squid" exe="/usr/sbin/squid" subj=system_u:system_r:squid_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191851641.141:153): user pid=4941 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851701.226:154): user pid=5004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191851750.793:155): avc:  denied  { name_connect } for  pid=2317 comm="squid" dest=8000 scontext=system_u:system_r:squid_t:s0 tcontext=system_u:object_r:soundd_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1191851750.793:155): arch=c000003e syscall=42 success=no exit=-115 a0=e a1=c26514 a2=10 a3=c51440 items=0 ppid=2315 pid=2317 auid=4294967295 uid=23 gid=23 euid=23 suid=0 fsuid=23 egid=23 sgid=23 fsgid=23 tty=(none) comm="squid" exe="/usr/sbin/squid" subj=system_u:system_r:squid_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191851761.320:156): user pid=5053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851821.410:157): user pid=5061 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851881.490:158): user pid=5075 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191851941.570:159): user pid=5097 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191852001.648:160): user pid=5107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191852001.650:161): avc:  denied  { search } for  pid=5107 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191852001.650:161): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=5107 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191852061.690:162): user pid=5121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191852539.682:163): avc:  denied  { read write } for  pid=2153 comm="rpc.mountd" name="control" dev=tmpfs ino=284 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191852539.682:163): arch=c000003e syscall=2 success=yes exit=11 a0=7fff59ad8c30 a1=2 a2=0 a3=0 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191852539.683:164): avc:  denied  { ioctl } for  pid=2153 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=284 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191852539.683:164): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c138fd00 a2=2aaaaaced800 a3=0 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191852539.696:165): avc:  denied  { read } for  pid=2153 comm="rpc.mountd" name="vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191852539.696:165): arch=c000003e syscall=2 success=yes exit=12 a0=2aaaaace9370 a1=0 a2=ffffffff80000000 a3=a23f156 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191852539.697:166): avc:  denied  { ioctl } for  pid=2153 comm="rpc.mountd" path="/dev/mapper/vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191852539.697:166): arch=c000003e syscall=16 success=yes exit=0 a0=c a1=80081272 a2=7fff59ad8808 a3=0 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191852539.870:167): avc:  denied  { getattr } for  pid=2153 comm="rpc.mountd" path="/dev/kvm" dev=tmpfs ino=5349 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191852539.870:167): arch=c000003e syscall=4 success=yes exit=0 a0=7fff59ada3d0 a1=7fff59ada330 a2=7fff59ada330 a3=2aaaab6469f0 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1191852744.765:168): user pid=5183 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191852744.775:169): user pid=5183 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191852744.776:170): user pid=5183 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191852744.783:171): user pid=5183 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191852744.784:172): user pid=5183 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191852744.785:173): user pid=5183 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191852901.737:174): user pid=5289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191852901.740:175): avc:  denied  { search } for  pid=5289 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191852901.740:175): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=5289 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191853447.866:176): avc:  denied  { ioctl } for  pid=2153 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=284 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191853447.866:176): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c138fd02 a2=2aaaaaced800 a3=2aaaaba77b49 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191853447.878:177): avc:  denied  { read } for  pid=2153 comm="rpc.mountd" name="vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191853447.878:177): arch=c000003e syscall=2 success=yes exit=10 a0=2aaaaace9370 a1=0 a2=ffffffff80000000 a3=17aced9f items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191853447.878:178): avc:  denied  { ioctl } for  pid=2153 comm="rpc.mountd" path="/dev/mapper/vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191853447.878:178): arch=c000003e syscall=16 success=yes exit=0 a0=a a1=80081272 a2=7fff59ada148 a3=17aced9f items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191853448.054:179): avc:  denied  { getattr } for  pid=2153 comm="rpc.mountd" path="/dev/kvm" dev=tmpfs ino=5349 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191853448.054:179): arch=c000003e syscall=4 success=yes exit=0 a0=7fff59adbd10 a1=7fff59adbc70 a2=7fff59adbc70 a3=2aaaab6469f0 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191853801.824:180): user pid=5384 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191854353.078:181): user pid=5578 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191854353.086:182): user pid=5578 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191854353.112:183): user pid=5578 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191854353.115:184): login pid=5578 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191854353.115:185): user pid=5578 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191854353.119:186): user pid=5582 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191854353.263:187): user pid=5578 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191854353.264:188): user pid=5578 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=AVC msg=audit(1191854548.980:189): avc:  denied  { ioctl } for  pid=2153 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=284 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191854548.980:189): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c138fd02 a2=2aaaaaced800 a3=2aaaaba77b49 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191854548.993:190): avc:  denied  { read } for  pid=2153 comm="rpc.mountd" name="vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191854548.993:190): arch=c000003e syscall=2 success=yes exit=12 a0=2aaaaaceb230 a1=0 a2=ffffffff80000000 a3=4022b93 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191854548.993:191): avc:  denied  { ioctl } for  pid=2153 comm="rpc.mountd" path="/dev/mapper/vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191854548.993:191): arch=c000003e syscall=16 success=yes exit=0 a0=c a1=80081272 a2=7fff59ad8808 a3=4022b93 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191854549.159:192): avc:  denied  { getattr } for  pid=2153 comm="rpc.mountd" path="/dev/kvm" dev=tmpfs ino=5349 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191854549.159:192): arch=c000003e syscall=4 success=yes exit=0 a0=7fff59ada3d0 a1=7fff59ada330 a2=7fff59ada330 a3=2aaaab6469f0 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191854701.252:193): user pid=5676 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191854701.254:194): avc:  denied  { search } for  pid=5676 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191854701.254:194): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=5676 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191855134.832:195): avc:  denied  { ioctl } for  pid=2153 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=284 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191855134.832:195): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c138fd02 a2=2aaaaaced800 a3=2aaaaba77b49 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191855134.845:196): avc:  denied  { read } for  pid=2153 comm="rpc.mountd" name="vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191855134.845:196): arch=c000003e syscall=2 success=yes exit=12 a0=2aaaaaceb230 a1=0 a2=ffffffff80000000 a3=1ab038d7 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191855134.845:197): avc:  denied  { ioctl } for  pid=2153 comm="rpc.mountd" path="/dev/mapper/vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191855134.845:197): arch=c000003e syscall=16 success=yes exit=0 a0=c a1=80081272 a2=7fff59ad8808 a3=1ab038d7 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191855135.027:198): avc:  denied  { getattr } for  pid=2153 comm="rpc.mountd" path="/dev/kvm" dev=tmpfs ino=5349 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191855135.027:198): arch=c000003e syscall=4 success=yes exit=0 a0=7fff59ada3d0 a1=7fff59ada330 a2=7fff59ada330 a3=2aaaab6469f0 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191855601.258:199): user pid=5737 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191855601.259:200): avc:  denied  { search } for  pid=5737 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191855601.259:200): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=5737 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191855661.649:201): user pid=5745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191855853.859:202): user pid=5800 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191855853.868:203): user pid=5800 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1191855853.888:204): user pid=5800 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191855853.900:205): user pid=5800 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191855853.900:206): user pid=5800 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191855853.901:207): user pid=5800 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191856501.733:208): user pid=5920 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191857094.660:209): avc:  denied  { name_connect } for  pid=2317 comm="squid" dest=8000 scontext=system_u:system_r:squid_t:s0 tcontext=system_u:object_r:soundd_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1191857094.660:209): arch=c000003e syscall=42 success=no exit=-115 a0=e a1=c3bcf4 a2=10 a3=c517f0 items=0 ppid=2315 pid=2317 auid=4294967295 uid=23 gid=23 euid=23 suid=0 fsuid=23 egid=23 sgid=23 fsgid=23 tty=(none) comm="squid" exe="/usr/sbin/squid" subj=system_u:system_r:squid_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191857401.565:210): user pid=6085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191857401.567:211): avc:  denied  { search } for  pid=6085 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191857401.567:211): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=6085 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191857841.059:212): avc:  denied  { ioctl } for  pid=2153 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=284 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191857841.059:212): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c138fd02 a2=2aaaaaced800 a3=2aaaaba77b49 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191857841.074:213): avc:  denied  { read } for  pid=2153 comm="rpc.mountd" name="vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191857841.074:213): arch=c000003e syscall=2 success=yes exit=8 a0=2aaaaaceb230 a1=0 a2=ffffffff80000000 a3=12997440 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191857841.074:214): avc:  denied  { ioctl } for  pid=2153 comm="rpc.mountd" path="/dev/mapper/vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191857841.074:214): arch=c000003e syscall=16 success=yes exit=0 a0=8 a1=80081272 a2=7fff59ada148 a3=12997440 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191857841.314:215): avc:  denied  { getattr } for  pid=2153 comm="rpc.mountd" path="/dev/kvm" dev=tmpfs ino=5349 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191857841.314:215): arch=c000003e syscall=4 success=yes exit=0 a0=7fff59adbd10 a1=7fff59adbc70 a2=7fff59adbc70 a3=2aaaab6469f0 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191858301.357:216): user pid=6243 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191858684.452:217): user pid=2956 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1191858684.460:218): user pid=2956 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1191858684.472:219): login pid=2956 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1191858684.657:220): user pid=2956 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1191858684.723:221): user pid=2956 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1191858684.725:222): user pid=2956 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1191858684.727:223): user pid=2956 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1191858768.416:224): user pid=2569 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1191858768.424:225): user pid=2569 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1191858768.427:226): login pid=2569 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1191858768.451:227): user pid=2569 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1191858768.460:228): user pid=2569 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1191858768.461:229): user pid=2569 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1191858768.462:230): user pid=2569 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1191858882.819:231): user pid=2956 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1191858882.822:232): user pid=2956 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1191858885.130:233): user pid=2569 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1191858885.140:234): user pid=2569 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1191858914.809:235): user pid=6452 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1191858914.816:236): user pid=6452 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1191858914.820:237): login pid=6452 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1191858914.842:238): user pid=6452 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1191858914.849:239): user pid=6452 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1191858914.850:240): user pid=6452 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1191858914.851:241): user pid=6452 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1191858962.645:242): user pid=6452 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1191858962.647:243): user pid=6452 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1191859201.130:244): user pid=6651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191859201.132:245): avc:  denied  { search } for  pid=6651 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191859201.132:245): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=6651 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191859261.598:246): user pid=6659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191860101.720:247): user pid=6727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191860250.774:248): avc:  denied  { ioctl } for  pid=2153 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=284 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191860250.774:248): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c138fd02 a2=2aaaaaced800 a3=2aaaaba77b49 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191860250.787:249): avc:  denied  { read } for  pid=2153 comm="rpc.mountd" name="vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191860250.787:249): arch=c000003e syscall=2 success=yes exit=12 a0=2aaaaaceb230 a1=0 a2=ffffffff80000000 a3=8d4cea2 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191860250.787:250): avc:  denied  { ioctl } for  pid=2153 comm="rpc.mountd" path="/dev/mapper/vol0-logRHEL4" dev=tmpfs ino=318 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1191860250.787:250): arch=c000003e syscall=16 success=yes exit=0 a0=c a1=80081272 a2=7fff59ad8808 a3=8d4cea2 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1191860250.949:251): avc:  denied  { getattr } for  pid=2153 comm="rpc.mountd" path="/dev/kvm" dev=tmpfs ino=5349 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1191860250.949:251): arch=c000003e syscall=4 success=yes exit=0 a0=7fff59ada3d0 a1=7fff59ada330 a2=7fff59ada330 a3=2aaaab6469f0 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191861001.071:252): user pid=6777 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191861001.072:253): avc:  denied  { search } for  pid=6777 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191861001.072:253): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=6777 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191861901.720:254): user pid=6854 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191862103.379:255): user pid=6907 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1191862107.539:256): user pid=6910 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1191862112.743:257): user pid=6912 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191862112.752:258): user pid=6912 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191862112.753:259): user pid=6912 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191862112.756:260): user pid=6912 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191862112.756:261): user pid=6912 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191862112.757:262): user pid=6912 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/system-config-display" (terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1191862112.795:263): user pid=6916 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191862112.795:264): user pid=6916 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191862112.923:265): user pid=6916 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191862114.366:266): user pid=6916 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1191862116.382:267): user pid=6921 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191862116.387:268): user pid=6921 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191862116.387:269): user pid=6921 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191862116.388:270): user pid=6921 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1191862123.675:271): user pid=6956 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191862123.675:272): user pid=6956 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191862123.692:273): user pid=6956 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191862124.428:274): user pid=6956 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191862438.768:275): user pid=6979 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191862438.794:276): user pid=6979 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191862438.798:277): login pid=6979 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191862438.799:278): user pid=6979 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191862438.802:279): user pid=6982 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191862439.291:280): user pid=6979 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191862439.294:281): user pid=6979 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191862569.066:282): user pid=7020 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191862569.085:283): user pid=7020 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191862569.088:284): login pid=7020 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191862569.088:285): user pid=7020 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191862569.092:286): user pid=7023 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191862569.190:287): user pid=7020 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191862569.191:288): user pid=7020 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191862792.677:289): user pid=7063 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191862792.691:290): user pid=7063 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191862792.694:291): login pid=7063 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191862792.694:292): user pid=7063 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191862792.697:293): user pid=7066 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191862792.793:294): user pid=7063 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191862792.794:295): user pid=7063 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191862801.979:296): user pid=7096 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191862801.982:297): avc:  denied  { search } for  pid=7096 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191862801.982:297): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=7096 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191862803.727:298): user pid=7100 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191862803.744:299): user pid=7100 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191862803.747:300): login pid=7100 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191862803.747:301): user pid=7100 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191862803.750:302): user pid=7103 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191862804.101:303): user pid=7100 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191862804.101:304): user pid=7100 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191862809.516:305): user pid=7134 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191862809.528:306): user pid=7134 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191862809.531:307): login pid=7134 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191862809.531:308): user pid=7134 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191862809.534:309): user pid=7137 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1191862809.571:310): user pid=7134 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=/dev/pts/1 res=success)'
>type=CRED_DISP msg=audit(1191862836.906:311): user pid=7134 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191862836.906:312): user pid=7134 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191862861.982:313): user pid=7225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191862929.418:314): user pid=7257 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191862929.418:315): user pid=7257 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191862929.474:316): user pid=7257 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1191862931.723:317): avc:  denied  { read write } for  pid=2645 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=2129944 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1191862931.723:317): arch=c000003e syscall=30 success=yes exit=-800661504 a0=208018 a1=0 a2=0 a3=0 items=0 ppid=2640 pid=2645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1191863153.368:318): user pid=7257 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191863701.460:319): user pid=7417 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191863701.462:320): avc:  denied  { search } for  pid=7417 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191863701.462:320): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=7417 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191864601.581:321): user pid=7599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191865501.076:322): user pid=9965 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191866209.068:323): user pid=10290 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191866209.076:324): user pid=10290 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1191866209.077:325): user pid=10290 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191866209.085:326): user pid=10290 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191866209.086:327): user pid=10290 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191866209.087:328): user pid=10290 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1191866392.223:329): user pid=10731 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191866392.233:330): user pid=10731 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191866392.233:331): user pid=10731 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191866392.234:332): user pid=10731 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191866401.556:333): user pid=10769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191866401.558:334): avc:  denied  { search } for  pid=10769 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191866401.558:334): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=10769 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191866461.101:335): user pid=10817 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191867301.148:336): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191867301.150:337): avc:  denied  { search } for  pid=11050 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191867301.150:337): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=11050 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191868201.321:338): user pid=11147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1191868249.746:339): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6080 comm="compiz" sig=11
>type=USER_END msg=audit(1191868250.515:340): user pid=2640 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1191868250.516:341): user pid=2640 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1191868265.491:342): user pid=11173 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1191868265.500:343): user pid=11173 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1191868265.501:344): user pid=11173 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1191868265.503:345): login pid=11173 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1191868265.537:346): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191868265.566:347): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1191868265.568:348): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1191869101.352:349): user pid=11977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191869101.354:350): avc:  denied  { search } for  pid=11977 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191869101.354:350): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=11977 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191870001.259:351): user pid=12206 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191870061.621:352): user pid=12213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191870901.732:353): user pid=12447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191871801.550:354): user pid=12743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191872701.451:355): user pid=12968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191872701.453:356): avc:  denied  { search } for  pid=12968 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191872701.453:356): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=12968 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191873601.779:357): user pid=13271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191873661.838:358): user pid=13308 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191874501.884:359): user pid=13514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191875401.331:360): user pid=13673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191876301.163:361): user pid=13734 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191877201.591:362): user pid=13833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191877261.055:363): user pid=13841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191878101.104:364): user pid=13889 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191878544.779:365): user pid=13920 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191878544.787:366): user pid=13920 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191878544.850:367): user pid=13920 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191878544.881:368): user pid=13920 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191878544.881:369): user pid=13920 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191878544.882:370): user pid=13920 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191879001.116:371): user pid=14394 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191879001.118:372): avc:  denied  { search } for  pid=14394 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191879001.118:372): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=14394 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1191879332.866:373): user pid=14570 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191879332.874:374): user pid=14570 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191879332.874:375): user pid=14570 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191879332.879:376): user pid=14570 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191879332.879:377): user pid=14570 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191879332.881:378): user pid=14570 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191879901.739:379): user pid=14652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191880801.599:380): user pid=14721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191880801.600:381): avc:  denied  { search } for  pid=14721 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191880801.600:381): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=14721 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191880861.191:382): user pid=14728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191881701.234:383): user pid=14776 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1191881851.475:384): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1191881851.475:385): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1191881869.353:386): user pid=14834 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191881869.449:387): user pid=14834 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191881869.452:388): login pid=14834 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191881869.453:389): user pid=14834 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191881869.455:390): user pid=14837 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1191881869.483:391): user pid=14834 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=/dev/pts/0 res=success)'
>type=USER_AUTH msg=audit(1191881956.492:392): user pid=14897 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191881956.500:393): user pid=14897 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191881956.501:394): user pid=14897 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191881956.504:395): user pid=14897 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191881956.504:396): user pid=14897 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191881956.505:397): user pid=14897 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1191882490.969:398): user pid=14834 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191882490.970:399): user pid=14834 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191882601.534:400): user pid=14964 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191883501.708:401): user pid=14992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191883657.560:402): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1191883657.568:403): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1191883657.569:404): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1191883657.576:405): login pid=11173 uid=0 old auid=500 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1191883657.635:406): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191883657.671:407): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1191883657.672:408): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1191883663.213:409): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=15181 comm="escd" sig=11
>type=USER_AUTH msg=audit(1191883683.418:410): user pid=15305 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191883683.418:411): user pid=15305 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191883683.475:412): user pid=15305 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1191883695.163:413): user pid=15305 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1191884002.560:414): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1191884002.561:415): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1191884279.618:416): user pid=15504 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191884279.643:417): user pid=15504 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191884279.646:418): login pid=15504 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191884279.647:419): user pid=15504 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191884279.649:420): user pid=15507 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191884279.934:421): user pid=15504 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191884279.935:422): user pid=15504 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191884280.170:423): user pid=15540 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191884280.184:424): user pid=15540 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191884280.186:425): login pid=15540 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191884280.187:426): user pid=15540 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191884280.189:427): user pid=15543 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191884280.415:428): user pid=15540 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191884280.415:429): user pid=15540 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191884309.472:430): user pid=15578 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191884309.485:431): user pid=15578 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191884309.487:432): login pid=15578 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191884309.488:433): user pid=15578 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191884309.490:434): user pid=15581 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191884309.774:435): user pid=15578 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191884309.775:436): user pid=15578 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191884309.924:437): user pid=15614 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191884309.936:438): user pid=15614 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191884309.938:439): login pid=15614 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191884309.939:440): user pid=15614 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191884309.942:441): user pid=15617 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1191884310.877:442): user pid=15614 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1191884310.878:443): user pid=15614 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191884401.492:444): user pid=15654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191884401.494:445): avc:  denied  { search } for  pid=15654 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191884401.494:445): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=15654 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191884461.183:446): user pid=15660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191885301.230:447): user pid=15688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191886201.415:448): user pid=15718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191887101.661:449): user pid=15746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191888001.335:450): user pid=15774 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191888061.810:451): user pid=15780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191888901.849:452): user pid=15808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191889801.798:453): user pid=15838 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191890701.974:454): user pid=15866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191891601.926:455): user pid=15894 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191891661.632:456): user pid=15900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191891961.666:457): user pid=15914 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191891971.990:458): avc:  denied  { use } for  pid=15972 comm="vpnc" path="pipe:[789909]" dev=pipefs ino=789909 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1191891971.990:458): avc:  denied  { read } for  pid=15972 comm="vpnc" path="pipe:[789909]" dev=pipefs ino=789909 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=AVC msg=audit(1191891971.990:458): avc:  denied  { write } for  pid=15972 comm="vpnc" path="pipe:[789910]" dev=pipefs ino=789910 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191891971.990:458): arch=c000003e syscall=59 success=yes exit=0 a0=6c7050 a1=6c78d0 a2=713a40 a3=0 items=0 ppid=15947 pid=15972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191891972.040:459): avc:  denied  { ioctl } for  pid=15972 comm="vpnc" path="pipe:[789909]" dev=pipefs ino=789909 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191891972.040:459): arch=c000003e syscall=16 success=no exit=-22 a0=0 a1=5401 a2=7ffff1b48290 a3=240 items=0 ppid=15947 pid=15972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191891972.041:460): avc:  denied  { getattr } for  pid=15972 comm="vpnc" path="pipe:[789909]" dev=pipefs ino=789909 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191891972.041:460): arch=c000003e syscall=5 success=yes exit=0 a0=0 a1=7ffff1b481a0 a2=7ffff1b481a0 a3=240 items=0 ppid=15947 pid=15972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191892501.651:461): user pid=15997 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191892501.654:462): avc:  denied  { search } for  pid=15997 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191892501.654:462): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=15997 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191893401.880:463): user pid=16027 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191894301.081:464): user pid=16055 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191895201.290:465): user pid=16083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191895261.446:466): user pid=16089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191895321.483:467): user pid=16096 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191896101.489:468): user pid=16127 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191897001.385:469): user pid=16157 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191897901.470:470): user pid=16185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191898801.638:471): user pid=27173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191898861.623:472): user pid=27305 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1191899622.550:473): user pid=30405 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1191899622.550:474): user pid=30405 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1191899622.632:475): user pid=30405 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1191899622.633:476): user pid=30405 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191899701.550:477): user pid=30447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191900602.002:478): user pid=30477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191901501.253:479): user pid=30505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191902401.554:480): user pid=30533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191902461.207:481): user pid=30539 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191903301.249:482): user pid=30567 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191904201.134:483): user pid=30597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191905101.758:484): user pid=30625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191906001.907:485): user pid=30653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191906061.606:486): user pid=30659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191906901.650:487): user pid=30687 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191907801.463:488): user pid=30717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191908701.989:489): user pid=30745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191909601.147:490): user pid=30773 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191909661.762:491): user pid=30779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191910501.804:492): user pid=30807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191911401.675:493): user pid=30837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191912301.177:494): user pid=30874 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191913201.408:495): user pid=30902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191913261.062:496): user pid=30908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191913801.102:497): user pid=30928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191914101.895:498): user pid=30945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191915001.071:499): user pid=30975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191915901.889:500): user pid=31003 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191916801.051:501): user pid=31031 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191916861.053:502): user pid=31037 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191917701.097:503): user pid=31065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191918601.657:504): user pid=31095 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191919501.470:505): user pid=31123 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191920401.530:506): user pid=31151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191920461.973:507): user pid=31157 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191921301.016:508): user pid=31185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191922201.377:509): user pid=31215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191922376.564:510): user pid=31223 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1191922376.589:511): user pid=31223 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1191922376.592:512): login pid=31223 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1191922376.593:513): user pid=31223 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1191922376.596:514): user pid=31226 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1191922376.716:515): user pid=31223 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/0 res=success)'
>type=USER_AUTH msg=audit(1191922381.924:516): user pid=31270 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191922381.933:517): user pid=31270 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191922381.934:518): user pid=31270 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191922381.941:519): user pid=31270 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191922381.941:520): user pid=31270 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191922381.943:521): user pid=31270 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1191922394.173:522): user pid=31348 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191922394.181:523): user pid=31348 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1191922394.182:524): user pid=31348 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191922394.187:525): user pid=31348 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191922394.187:526): user pid=31348 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191922394.188:527): user pid=31348 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1191922519.134:528): user pid=31223 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1191922519.135:529): user pid=31223 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1191923101.773:530): user pid=31458 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191923101.775:531): avc:  denied  { search } for  pid=31458 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191923101.775:531): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=31458 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191924002.004:532): user pid=31486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191924061.857:533): user pid=31492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191924901.903:534): user pid=31520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191925801.799:535): user pid=31550 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191926701.211:536): user pid=31578 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191927601.674:537): user pid=31606 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191927661.664:538): user pid=31612 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191928501.704:539): user pid=31640 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191928566.338:540): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1191928566.347:541): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1191928566.348:542): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1191928566.354:543): login pid=11173 uid=0 old auid=500 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1191928566.417:544): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1191928566.468:545): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1191928566.469:546): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1191929401.121:547): user pid=32415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191929401.123:548): avc:  denied  { search } for  pid=32415 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191929401.123:548): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=32415 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1191929759.795:549): user pid=32643 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191929759.803:550): user pid=32643 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191929759.804:551): user pid=32643 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191929759.810:552): user pid=32643 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191929759.810:553): user pid=32643 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191929759.812:554): user pid=32643 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191929877.514:555): user pid=471 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191929877.521:556): user pid=471 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191929877.522:557): user pid=471 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191929877.523:558): user pid=471 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191930301.859:559): user pid=563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191930301.860:560): avc:  denied  { search } for  pid=563 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191930301.860:560): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=563 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191931201.174:561): user pid=658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191931201.175:562): avc:  denied  { search } for  pid=658 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191931201.175:562): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=658 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191931261.610:563): user pid=667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191932101.674:564): user pid=752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191932852.840:565): user pid=942 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191932852.849:566): user pid=942 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1191932852.849:567): user pid=942 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191932852.852:568): user pid=942 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191932852.852:569): user pid=942 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191932852.853:570): user pid=942 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1191932869.270:571): user pid=979 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191932869.277:572): user pid=979 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1191932869.292:573): user pid=979 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1191932869.299:574): user pid=979 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1191932869.299:575): user pid=979 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1191932869.301:576): user pid=979 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1191932908.095:577): user pid=1028 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191932908.101:578): user pid=1028 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191932908.102:579): user pid=1028 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191932908.103:580): user pid=1028 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191933001.352:581): user pid=1080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191933001.354:582): avc:  denied  { search } for  pid=1080 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191933001.354:582): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=1080 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191933901.673:583): user pid=1458 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191933901.675:584): avc:  denied  { search } for  pid=1458 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191933901.675:584): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=1458 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191934801.035:585): user pid=1674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191934801.049:586): user pid=1673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191934861.287:587): user pid=1690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191934861.309:588): user pid=1689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191934921.366:589): user pid=1706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191934981.631:590): user pid=1722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935041.720:591): user pid=1735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935101.798:592): user pid=1748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935161.889:593): user pid=1764 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935221.866:594): user pid=1782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935281.946:595): user pid=1798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935341.023:596): user pid=1828 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935401.107:597): user pid=1847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935461.197:598): user pid=1872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935521.270:599): user pid=1889 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935581.350:600): user pid=1921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935641.426:601): user pid=1951 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935701.503:602): user pid=2015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935701.516:603): user pid=2014 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935761.094:604): user pid=2046 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935821.181:605): user pid=2074 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935881.258:606): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191935941.339:607): user pid=2107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936001.416:608): user pid=2125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936061.503:609): user pid=2138 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936121.590:610): user pid=2169 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936181.683:611): user pid=2180 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936241.864:612): user pid=2196 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936301.938:613): user pid=2209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936361.013:614): user pid=2222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936421.088:615): user pid=2237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936481.163:616): user pid=2308 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936541.239:617): user pid=2324 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936601.315:618): user pid=2391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936601.324:619): user pid=2390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936661.826:620): user pid=2445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936721.904:621): user pid=2460 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936781.977:622): user pid=2493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936841.053:623): user pid=2555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936901.132:624): user pid=2623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191936961.226:625): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937021.319:626): user pid=2672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937081.398:627): user pid=2686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937141.474:628): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937201.579:629): user pid=3352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937261.667:630): user pid=3682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937321.753:631): user pid=4082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191937351.830:632): user pid=4395 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191937351.843:633): user pid=4395 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1191937351.844:634): user pid=4395 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1191937351.875:635): user pid=4395 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1191937351.875:636): user pid=4395 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1191937351.877:637): user pid=4395 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1191937381.851:638): user pid=4420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937441.926:639): user pid=4445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937502.003:640): user pid=4464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191937502.005:641): avc:  denied  { search } for  pid=4464 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191937502.005:641): arch=c000003e syscall=80 success=yes exit=0 a0=698205 a1=698370 a2=0 a3=0 items=0 ppid=2303 pid=4464 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191937502.016:642): user pid=4463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937561.698:643): user pid=4506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937621.774:644): user pid=4523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937681.851:645): user pid=4545 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937741.017:646): user pid=4557 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937801.092:647): user pid=4569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937861.167:648): user pid=4581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937921.267:649): user pid=4593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191937981.349:650): user pid=4604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191938041.446:651): user pid=4696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191938101.180:652): user pid=4711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191938161.278:653): user pid=4723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191938221.358:654): user pid=4757 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191938281.438:655): user pid=4812 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191938341.764:656): user pid=4864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191938401.869:657): user pid=4876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191938444.959:658): user pid=4918 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191938444.968:659): user pid=4918 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1191938444.970:660): user pid=4918 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191938444.973:661): user pid=4918 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191938444.973:662): user pid=4918 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191938444.975:663): user pid=4918 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191938461.039:664): user pid=4923 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1191938475.283:665): user pid=4931 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191938475.285:666): user pid=4931 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191938475.286:667): user pid=4931 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191938475.287:668): user pid=4931 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191939301.157:669): user pid=5307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191939301.159:670): avc:  denied  { search } for  pid=5307 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191939301.159:670): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=5307 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191940201.393:671): user pid=5465 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191940201.395:672): avc:  denied  { search } for  pid=5465 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191940201.395:672): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=5465 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191941101.044:673): user pid=5873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191942001.462:674): user pid=5978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191942006.521:675): user pid=5982 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191942006.529:676): user pid=5982 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1191942006.529:677): user pid=5982 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191942006.532:678): user pid=5982 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191942006.532:679): user pid=5982 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191942006.534:680): user pid=5982 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191942061.879:681): user pid=6033 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191942901.265:682): user pid=6193 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191942901.268:683): avc:  denied  { search } for  pid=6193 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191942901.268:683): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=6193 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191943801.427:684): user pid=6275 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1191944465.276:685): user pid=6486 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191944465.284:686): user pid=6486 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191944465.284:687): user pid=6486 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191944465.287:688): user pid=6486 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191944465.287:689): user pid=6486 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191944465.288:690): user pid=6486 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191944519.496:691): user pid=6495 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191944519.497:692): user pid=6495 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191944519.498:693): user pid=6495 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191944519.500:694): user pid=6495 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191944562.901:695): user pid=6500 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191944562.907:696): user pid=6500 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191944562.907:697): user pid=6500 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191944562.908:698): user pid=6500 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191944701.889:699): user pid=6547 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191944701.891:700): avc:  denied  { search } for  pid=6547 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191944701.891:700): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=6547 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1191945220.101:701): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6221 comm="amaya_bin" sig=6
>type=USER_ACCT msg=audit(1191945601.604:702): user pid=6661 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191945661.345:703): user pid=6677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191946501.398:704): user pid=6895 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191946501.401:705): avc:  denied  { search } for  pid=6895 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191946501.401:705): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=6895 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1191946796.552:706): user pid=6963 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191946796.560:707): user pid=6963 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191946796.561:708): user pid=6963 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191946796.564:709): user pid=6963 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191946796.564:710): user pid=6963 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191946796.565:711): user pid=6963 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191946820.564:712): user pid=6970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191946820.566:713): user pid=6970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191946820.584:714): user pid=6970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191946820.585:715): user pid=6970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1191947189.785:716): user pid=7109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1191947191.874:717): user pid=7109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191947191.883:718): user pid=7109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191947191.884:719): user pid=7109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191947191.890:720): user pid=7109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191947191.890:721): user pid=7109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191947191.892:722): user pid=7109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1191947198.140:723): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1191947198.140:723): arch=c000003e syscall=16 success=yes exit=0 a0=7 a1=89a2 a2=7fff1a7e1920 a3=0 items=0 ppid=1 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_ACCT msg=audit(1191947402.487:724): user pid=7198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191947402.489:725): avc:  denied  { search } for  pid=7198 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191947402.489:725): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=7198 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1191947792.707:726): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1191948277.020:727): user pid=7405 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191948277.030:728): user pid=7405 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1191948277.073:729): user pid=7405 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1191948277.103:730): user pid=7405 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1191948277.104:731): user pid=7405 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1191948277.105:732): user pid=7405 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1191948301.674:733): user pid=7453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191948301.676:734): avc:  denied  { search } for  pid=7453 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191948301.676:734): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=7453 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1191948735.091:735): user pid=7670 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191948735.098:736): user pid=7670 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1191948735.099:737): user pid=7670 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1191948735.102:738): user pid=7670 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1191948735.102:739): user pid=7670 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1191948735.103:740): user pid=7670 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1191949202.006:741): user pid=7727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191949202.009:742): avc:  denied  { search } for  pid=7727 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191949202.009:742): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=7727 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191949261.835:743): user pid=7735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191950101.042:744): user pid=7799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191951001.602:745): user pid=7862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191951901.440:746): user pid=7942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191952801.143:747): user pid=8003 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191952861.615:748): user pid=8011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191953701.658:749): user pid=8073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191954601.298:750): user pid=8137 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191955501.152:751): user pid=8203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191956401.844:752): user pid=8262 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191956461.662:753): user pid=8270 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191957301.704:754): user pid=8332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191958201.327:755): user pid=8393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191959101.917:756): user pid=8457 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191960001.332:757): user pid=8518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191960061.375:758): user pid=8526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191960901.415:759): user pid=8588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191961801.741:760): user pid=8651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191962701.109:761): user pid=8715 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191963601.457:762): user pid=8774 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191963661.108:763): user pid=8782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191964501.150:764): user pid=8844 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191965401.280:765): user pid=8907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191966301.914:766): user pid=8973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191967201.094:767): user pid=9034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191967261.700:768): user pid=9042 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191968101.743:769): user pid=9106 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191969001.760:770): user pid=9167 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191969901.292:771): user pid=9233 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191970801.714:772): user pid=9291 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191970861.430:773): user pid=9300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191971701.469:774): user pid=9364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191972601.551:775): user pid=9424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191973501.702:776): user pid=9488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191974401.633:777): user pid=9546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191974461.051:778): user pid=9555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191975301.092:779): user pid=9617 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191976201.895:780): user pid=9677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191977101.793:781): user pid=9742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191978001.672:782): user pid=9800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191978061.404:783): user pid=9809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191978361.439:784): user pid=9839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191978371.979:785): avc:  denied  { use } for  pid=9897 comm="vpnc" path="pipe:[1576439]" dev=pipefs ino=1576439 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1191978371.979:785): avc:  denied  { read } for  pid=9897 comm="vpnc" path="pipe:[1576439]" dev=pipefs ino=1576439 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=AVC msg=audit(1191978371.979:785): avc:  denied  { write } for  pid=9897 comm="vpnc" path="pipe:[1576440]" dev=pipefs ino=1576440 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191978371.979:785): arch=c000003e syscall=59 success=yes exit=0 a0=6c7050 a1=6c78d0 a2=713a40 a3=0 items=0 ppid=9872 pid=9897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191978372.045:786): avc:  denied  { ioctl } for  pid=9897 comm="vpnc" path="pipe:[1576439]" dev=pipefs ino=1576439 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191978372.045:786): arch=c000003e syscall=16 success=no exit=-22 a0=0 a1=5401 a2=7fff5ac04d80 a3=240 items=0 ppid=9872 pid=9897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1191978372.045:787): avc:  denied  { getattr } for  pid=9897 comm="vpnc" path="pipe:[1576439]" dev=pipefs ino=1576439 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1191978372.045:787): arch=c000003e syscall=5 success=yes exit=0 a0=0 a1=7fff5ac04c90 a2=7fff5ac04c90 a3=240 items=0 ppid=9872 pid=9897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191978901.199:788): user pid=9951 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191979801.738:789): user pid=10011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191980701.576:790): user pid=10076 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191981601.302:791): user pid=10134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191981661.791:792): user pid=10142 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191981721.830:793): user pid=10152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191982501.836:794): user pid=10215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191983401.031:795): user pid=10275 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191984301.415:796): user pid=10340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191985201.300:797): user pid=12201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191985201.302:798): avc:  denied  { search } for  pid=12201 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191985201.302:798): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=12201 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191985261.624:799): user pid=12234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1191985569.661:800): user pid=12703 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1191985569.661:801): user pid=12703 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1191985569.802:802): user pid=12703 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1191985569.803:803): user pid=12703 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1191986101.198:804): user pid=12773 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1191986101.200:805): avc:  denied  { search } for  pid=12773 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191986101.200:805): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=12773 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1191987001.915:806): user pid=12833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191987901.160:807): user pid=12900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191988801.592:808): user pid=12958 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191988861.526:809): user pid=12966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191989701.568:810): user pid=13032 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191990601.360:811): user pid=13092 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191991501.017:812): user pid=13159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191992401.066:813): user pid=13217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191992461.820:814): user pid=13225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191993301.862:815): user pid=13290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191994201.199:816): user pid=13350 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191995101.946:817): user pid=13417 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191996001.158:818): user pid=13475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191996061.102:819): user pid=13483 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191996901.143:820): user pid=13557 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191997801.196:821): user pid=13617 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191998701.077:822): user pid=13684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191999601.837:823): user pid=13742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1191999661.720:824): user pid=13750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192000201.761:825): user pid=13796 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192000501.493:826): user pid=13843 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192001401.403:827): user pid=13903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192002301.612:828): user pid=13972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192003201.477:829): user pid=14030 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192003261.461:830): user pid=14038 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192004101.500:831): user pid=14107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192004640.846:832): user pid=14191 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192004640.856:833): user pid=14191 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192004640.857:834): user pid=14191 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192004640.862:835): user pid=14191 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192004640.863:836): user pid=14191 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192004640.865:837): user pid=14191 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192004693.811:838): user pid=14429 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192004693.817:839): user pid=14429 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192004693.817:840): user pid=14429 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192004693.818:841): user pid=14429 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1192004730.059:842): user pid=14483 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1192004732.329:843): user pid=14483 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192004732.329:844): user pid=14483 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192004732.380:845): user pid=14483 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1192004732.794:846): user pid=14483 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1192004769.388:847): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1192004769.388:847): arch=c000003e syscall=16 success=yes exit=0 a0=7 a1=89a2 a2=7fff1a7e1930 a3=0 items=0 ppid=1 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1192004773.643:848): dev=vnet1 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1192004773.643:848): arch=c000003e syscall=16 success=yes exit=0 a0=7 a1=89a2 a2=7fff1a7e1930 a3=1 items=0 ppid=1 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1192004816.659:849): user pid=14595 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192004816.705:850): user pid=14595 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192004816.706:851): user pid=14595 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192004816.713:852): user pid=14595 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192004816.713:853): user pid=14595 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192004816.714:854): user pid=14595 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1192004833.094:855): dev=vnet2 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1192004833.094:855): arch=c000003e syscall=16 success=yes exit=0 a0=7 a1=89a2 a2=7fff1a7e1920 a3=1 items=0 ppid=1 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1192004836.581:856): dev=vnet2 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1192004840.905:857): dev=vnet2 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1192004840.905:857): arch=c000003e syscall=16 success=yes exit=0 a0=7 a1=89a2 a2=7fff1a7e1920 a3=1 items=0 ppid=1 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192005001.868:858): user pid=14718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192005001.913:859): avc:  denied  { search } for  pid=14718 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192005001.913:859): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=14718 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1192005064.910:860): dev=vnet2 prom=0 old_prom=256 auid=4294967295
>type=CRED_ACQ msg=audit(1192005084.991:861): user pid=14785 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192005085.012:862): user pid=14785 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192005085.013:863): user pid=14785 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192005085.014:864): user pid=14785 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1192005087.265:865): dev=vnet2 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1192005087.265:865): arch=c000003e syscall=16 success=yes exit=0 a0=7 a1=89a2 a2=7fff1a7e1920 a3=1 items=0 ppid=1 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1192005114.324:866): user pid=14853 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192005114.324:867): user pid=14853 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192005114.825:868): user pid=14853 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1192005123.604:869): avc:  denied  { read write } for  pid=15468 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=21463069 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192005123.604:869): arch=c000003e syscall=30 success=yes exit=-800624640 a0=147801d a1=0 a2=0 a3=0 items=0 ppid=11173 pid=15468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192005717.451:870): user pid=14990 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1192005717.556:871): user pid=14990 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1192005717.825:872): user pid=14990 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1192005717.951:873): user pid=14990 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1192005717.951:874): user pid=14990 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_CMD msg=audit(1192005717.952:875): user pid=14990 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/4 res=success)'
>type=USER_END msg=audit(1192005836.766:876): user pid=14853 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192005902.122:877): user pid=15081 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192005902.124:878): avc:  denied  { search } for  pid=15081 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192005902.124:878): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=15081 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192006045.957:879): avc:  denied  { read write } for  pid=15160 comm="modprobe" path="socket:[1970499]" dev=sockfs ino=1970499 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket
>type=SYSCALL msg=audit(1192006045.957:879): arch=c000003e syscall=59 success=yes exit=0 a0=616aa0 a1=7fff3ce5d570 a2=7fff3ce60b50 a3=2aaaaaad00b0 items=0 ppid=15126 pid=15160 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1192006133.741:880): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1192006658.715:881): user pid=15273 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1192006662.417:882): user pid=15273 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1192006663.818:883): user pid=15273 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192006663.825:884): user pid=15273 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192006663.842:885): user pid=15273 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192006663.862:886): user pid=15273 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192006663.862:887): user pid=15273 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192006663.863:888): user pid=15273 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1192006671.663:889): dev=vnet2 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1192006671.916:890): dev=vnet1 prom=0 old_prom=256 auid=4294967295
>type=CRED_ACQ msg=audit(1192006709.057:891): user pid=15476 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192006709.064:892): user pid=15476 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192006709.065:893): user pid=15476 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192006709.066:894): user pid=15476 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1192006716.727:895): dev=vnet0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1192006716.727:895): arch=c000003e syscall=16 success=yes exit=0 a0=7 a1=89a2 a2=7fff28bd8960 a3=0 items=0 ppid=1 pid=15383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1192006752.818:896): user pid=15581 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1192006752.826:897): user pid=15581 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1192006752.847:898): user pid=15581 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1192006752.859:899): user pid=15581 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1192006752.859:900): user pid=15581 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_CMD msg=audit(1192006752.860:901): user pid=15581 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/3 res=success)'
>type=AVC msg=audit(1192006781.987:902): avc:  denied  { read write } for  pid=15468 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=21823500 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192006781.987:902): arch=c000003e syscall=30 success=yes exit=-806891520 a0=14d000c a1=0 a2=0 a3=0 items=0 ppid=11173 pid=15468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192006801.443:903): user pid=15647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192006801.445:904): avc:  denied  { search } for  pid=15647 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192006801.445:904): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=15647 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192006861.062:905): user pid=15684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1192007011.625:906): dev=vnet1 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1192007011.625:906): arch=c000003e syscall=16 success=yes exit=0 a0=7 a1=89a2 a2=7fff28bd8960 a3=1 items=0 ppid=1 pid=15383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1192007016.751:907): dev=vnet2 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1192007016.751:907): arch=c000003e syscall=16 success=yes exit=0 a0=7 a1=89a2 a2=7fff28bd8960 a3=1 items=0 ppid=1 pid=15383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1192007534.731:908): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192007534.771:909): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192007534.807:910): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192007534.851:911): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192007534.851:912): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192007534.856:913): user pid=15970 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1192007615.675:914): user pid=16037 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=failed)'
>type=USER_AUTH msg=audit(1192007617.286:915): user pid=16037 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1192007617.293:916): user pid=16037 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_ACQ msg=audit(1192007617.305:917): user pid=16037 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1192007617.313:918): user pid=16037 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1192007617.313:919): user pid=16037 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_CMD msg=audit(1192007617.314:920): user pid=16037 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1192007701.515:921): user pid=16088 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192007701.517:922): avc:  denied  { search } for  pid=16088 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192007701.517:922): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=16088 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1192008064.948:923): dev=vnet2 prom=0 old_prom=256 auid=4294967295
>type=USER_ACCT msg=audit(1192008602.239:924): user pid=16446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192008602.290:925): avc:  denied  { search } for  pid=16446 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192008602.290:925): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=16446 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192008786.222:926): user pid=16524 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192008786.262:927): user pid=16524 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192008786.309:928): user pid=16524 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192008786.442:929): user pid=16524 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192008786.443:930): user pid=16524 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192008786.445:931): user pid=16524 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192009502.436:932): user pid=16819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192010402.304:933): user pid=17194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192010461.688:934): user pid=17225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1192010488.594:935): dev=vnet1 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1192010493.549:936): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=AVC msg=audit(1192010538.906:937): avc:  denied  { read write } for  pid=15468 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=22315038 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192010538.906:937): arch=c000003e syscall=30 success=yes exit=-804532224 a0=154801e a1=0 a2=0 a3=0 items=0 ppid=11173 pid=15468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192011301.111:938): user pid=17516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192011301.113:939): avc:  denied  { search } for  pid=17516 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192011301.113:939): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=17516 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192011757.687:940): user pid=20143 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192011757.694:941): user pid=20143 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192011757.714:942): user pid=20143 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192011757.720:943): user pid=20143 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192011757.720:944): user pid=20143 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192011757.721:945): user pid=20143 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1192011791.176:946): user pid=20191 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192011791.176:947): user pid=20191 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192011791.248:948): user pid=20191 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1192011792.035:949): avc:  denied  { read write } for  pid=15468 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=22839330 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192011792.035:949): arch=c000003e syscall=30 success=yes exit=-802172928 a0=15c8022 a1=0 a2=0 a3=0 items=0 ppid=11173 pid=15468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=CRED_ACQ msg=audit(1192011851.628:950): user pid=20209 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192011851.631:951): user pid=20209 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192011851.631:952): user pid=20209 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192011851.632:953): user pid=20209 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm/kompiliste/packagekit" cmd="/usr/bin/kill" (terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192011851.661:954): user pid=20191 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1192011870.903:955): user pid=20212 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192011870.905:956): user pid=20212 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192011870.906:957): user pid=20212 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192011870.906:958): user pid=20212 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm/kompiliste/packagekit" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192012103.920:959): user pid=20234 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192012103.925:960): user pid=20234 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192012103.925:961): user pid=20234 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192012103.926:962): user pid=20234 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192012201.104:963): user pid=20283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192012201.106:964): avc:  denied  { search } for  pid=20283 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192012201.106:964): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=20283 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192012631.718:965): avc:  denied  { read write } for  pid=15468 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=23199756 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192012631.718:965): arch=c000003e syscall=30 success=yes exit=-806891520 a0=162000c a1=0 a2=0 a3=0 items=0 ppid=11173 pid=15468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192012773.155:966): user pid=22695 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1192012773.162:967): user pid=22695 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1192012773.163:968): user pid=22695 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1192012773.172:969): user pid=22695 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1192012773.172:970): user pid=22695 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_CMD msg=audit(1192012773.174:971): user pid=22695 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1192012833.257:972): user pid=22745 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192012833.264:973): user pid=22745 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192012833.265:974): user pid=22745 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192012833.279:975): user pid=22745 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192012833.279:976): user pid=22745 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192012833.280:977): user pid=22745 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm/kompiliste/packagekit" cmd="/usr/bin/yum" (terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192012850.326:978): user pid=22751 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192012850.328:979): user pid=22751 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192012850.329:980): user pid=22751 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192012850.330:981): user pid=22751 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm/kompiliste/packagekit" cmd="/usr/bin/yum" (terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1192012908.256:982): user pid=24709 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192012908.256:983): user pid=24709 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192012908.270:984): user pid=24709 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1192012918.728:985): user pid=24709 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1192012925.740:986): user pid=24722 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192012925.773:987): user pid=24722 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192012925.774:988): user pid=24722 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192012925.775:989): user pid=24722 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm/kompiliste/packagekit" cmd="/usr/bin/yum" (terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192012940.322:990): user pid=24725 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192012940.324:991): user pid=24725 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192012940.324:992): user pid=24725 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192012940.325:993): user pid=24725 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm/kompiliste/packagekit" cmd="/usr/bin/yum" (terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192012985.077:994): user pid=26688 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192012985.078:995): user pid=26688 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192012985.079:996): user pid=26688 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192012985.079:997): user pid=26688 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm/kompiliste/packagekit" cmd="/usr/bin/yum" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192013101.538:998): user pid=29846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192013101.540:999): avc:  denied  { search } for  pid=29846 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192013101.540:999): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=29846 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1192013466.737:1000): user pid=29976 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=wbpriv exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1192014001.444:1001): user pid=12803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192014001.446:1002): avc:  denied  { search } for  pid=12803 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192014001.446:1002): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=12803 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192014061.398:1003): user pid=12812 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_LOGIN msg=audit(1192014684.632:1004): user pid=23742 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.5, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1192014684.656:1005): user pid=23742 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192014684.763:1006): user pid=23742 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192014684.765:1007): login pid=23742 uid=0 old auid=4294967295 new auid=10464
>type=USER_START msg=audit(1192014684.766:1008): user pid=23742 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192014684.768:1009): user pid=23745 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192014684.808:1010): user pid=23742 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=10464: exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=/dev/pts/4 res=success)'
>type=USER_ACCT msg=audit(1192014901.522:1011): user pid=5910 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192014901.525:1012): avc:  denied  { search } for  pid=5910 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192014901.525:1012): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2303 pid=5910 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192014960.711:1013): user pid=16467 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192014960.725:1014): user pid=16467 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192014960.726:1015): user pid=16467 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192014960.736:1016): user pid=16467 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192014960.736:1017): user pid=16467 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192014960.737:1018): user pid=16467 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/2 res=success)'
>type=AVC msg=audit(1192015013.007:1019): avc:  denied  { getsched } for  pid=16479 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192015013.007:1019): arch=c000003e syscall=143 success=yes exit=0 a0=405f a1=2aaaab107068 a2=7fffe8fc2a80 a3=0 items=0 ppid=16478 pid=16479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192015013.021:1020): avc:  denied  { write } for  pid=16479 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671460 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192015013.021:1020): arch=c000003e syscall=2 success=yes exit=8 a0=62d4a0 a1=42 a2=1a4 a3=0 items=0 ppid=16478 pid=16479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192015013.022:1021): avc:  denied  { write } for  pid=16479 comm="packagekitd" name="PackageKit" dev=dm-1 ino=1671390 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir
>type=AVC msg=audit(1192015013.022:1021): avc:  denied  { add_name } for  pid=16479 comm="packagekitd" name="transactions.db-journal" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir
>type=AVC msg=audit(1192015013.022:1021): avc:  denied  { create } for  pid=16479 comm="packagekitd" name="transactions.db-journal" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1192015013.022:1021): arch=c000003e syscall=2 success=yes exit=9 a0=62d826 a1=c2 a2=1a4 a3=0 items=0 ppid=16478 pid=16479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192015013.023:1022): avc:  denied  { getattr } for  pid=16479 comm="packagekitd" path="/var/db/PackageKit/transactions.db-journal" dev=dm-1 ino=1671476 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1192015013.023:1022): arch=c000003e syscall=5 success=yes exit=0 a0=9 a1=7fffe8fc1980 a2=7fffe8fc1980 a3=0 items=0 ppid=16478 pid=16479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192015013.023:1023): avc:  denied  { read } for  pid=16479 comm="packagekitd" name="PackageKit" dev=dm-1 ino=1671390 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192015013.023:1023): arch=c000003e syscall=2 success=yes exit=10 a0=62d803 a1=0 a2=0 a3=0 items=0 ppid=16478 pid=16479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192015013.024:1024): avc:  denied  { write } for  pid=16479 comm="packagekitd" path="/var/db/PackageKit/transactions.db-journal" dev=dm-1 ino=1671476 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1192015013.024:1024): arch=c000003e syscall=1 success=yes exit=24 a0=9 a1=7fffe8fc1b20 a2=18 a3=0 items=0 ppid=16478 pid=16479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192015013.041:1025): avc:  denied  { remove_name } for  pid=16479 comm="packagekitd" name="transactions.db-journal" dev=dm-1 ino=1671476 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir
>type=AVC msg=audit(1192015013.041:1025): avc:  denied  { unlink } for  pid=16479 comm="packagekitd" name="transactions.db-journal" dev=dm-1 ino=1671476 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1192015013.041:1025): arch=c000003e syscall=87 success=yes exit=0 a0=62d826 a1=6312f0 a2=41 a3=0 items=0 ppid=16478 pid=16479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192015013.049:1026): avc:  denied  { read } for  pid=16479 comm="packagekitd" name="job_count.dat" dev=dm-1 ino=1671461 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192015013.049:1026): arch=c000003e syscall=2 success=yes exit=9 a0=418558 a1=0 a2=0 a3=61642e746e756f63 items=0 ppid=1 pid=16479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192015013.049:1027): avc:  denied  { getattr } for  pid=16479 comm="packagekitd" path="/var/run/PackageKit/job_count.dat" dev=dm-1 ino=1671461 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192015013.049:1027): arch=c000003e syscall=5 success=yes exit=0 a0=9 a1=7fffe8fc1350 a2=7fffe8fc1350 a3=61642e746e756f63 items=0 ppid=1 pid=16479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192015013.052:1028): avc:  denied  { unlink } for  pid=16479 comm="packagekitd" name="job_count.dat" dev=dm-1 ino=1671461 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192015013.052:1028): arch=c000003e syscall=82 success=yes exit=0 a0=634580 a1=418558 a2=41 a3=0 items=0 ppid=1 pid=16479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_AVC msg=audit(1192015013.053:1029): user pid=1943 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.189 spid=16479 tpid=16477 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=ANOM_ABEND msg=audit(1192015013.062:1030): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=16479 comm="packagekitd" sig=11
>type=USER_END msg=audit(1192015047.924:1031): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192015047.925:1032): user pid=11173 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192015077.389:1033): user pid=23742 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_END msg=audit(1192015077.390:1034): user pid=23742 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=DAEMON_END msg=audit(1192015106.621:4251): auditd normal halt, sending auid=4294967295 pid=16939 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1755
>type=DAEMON_START msg=audit(1192015201.024:8743): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1806 res=success, auditd pid=1806
>type=CONFIG_CHANGE msg=audit(1192015201.128:8): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1192015201.131:9): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1192015201.242:10): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1192015201.243:11): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1192015214.865:12): avc:  denied  { name_bind } for  pid=2124 comm="xinetd" src=119 scontext=system_u:system_r:inetd_t:s0 tcontext=system_u:object_r:innd_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1192015214.865:12): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fff8bd85e80 a2=1c a3=0 items=0 ppid=1 pid=2124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xinetd" exe="/usr/sbin/xinetd" subj=system_u:system_r:inetd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192015801.930:13): user pid=2767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192015801.932:14): avc:  denied  { search } for  pid=2767 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192015801.932:14): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2357 pid=2767 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192016413.861:15): user pid=2704 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192016413.871:16): user pid=2704 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1192016413.872:17): user pid=2704 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1192016413.877:18): login pid=2704 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1192016413.917:19): user pid=2704 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192016413.967:20): user pid=2704 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1192016413.968:21): user pid=2704 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1192016481.743:22): user pid=3158 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192016481.752:23): user pid=3158 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192016481.753:24): user pid=3158 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192016481.764:25): user pid=3158 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192016481.765:26): user pid=3158 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192016481.766:27): user pid=3158 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192016701.130:28): user pid=3728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192016701.132:29): avc:  denied  { search } for  pid=3728 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192016701.132:29): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2357 pid=3728 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=CRED_ACQ msg=audit(1192016725.118:30): user pid=3771 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192016725.124:31): user pid=3771 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192016725.124:32): user pid=3771 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192016725.125:33): user pid=3771 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=AVC msg=audit(1192016728.468:34): avc:  denied  { getsched } for  pid=3810 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192016728.468:34): arch=c000003e syscall=143 success=yes exit=0 a0=ee2 a1=2aaaab107068 a2=7ffff91b4ca0 a3=0 items=0 ppid=3809 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192016728.476:35): avc:  denied  { write } for  pid=3810 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671460 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192016728.476:35): arch=c000003e syscall=2 success=yes exit=8 a0=62d4a0 a1=42 a2=1a4 a3=0 items=0 ppid=3809 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_AVC msg=audit(1192016728.517:36): user pid=1994 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.29 spid=3810 tpid=3808 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=ANOM_ABEND msg=audit(1192016762.586:37): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=3810 comm="packagekitd" sig=11
>type=ANOM_ABEND msg=audit(1192016792.288:38): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=3823 comm="packagekitd" sig=11
>type=USER_AVC msg=audit(1192016799.653:39): user pid=1994 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.ConsoleKit.Manager member=GetSessionForUnixProcess dest=org.freedesktop.ConsoleKit spid=3837 tpid=2287 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:consolekit_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1192016799.657:40): avc:  denied  { search } for  pid=3837 comm="packagekitd" name="3834" dev=proc ino=20170 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=dir
>type=AVC msg=audit(1192016799.657:40): avc:  denied  { read } for  pid=3837 comm="packagekitd" name="stat" dev=proc ino=20172 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=file
>type=SYSCALL msg=audit(1192016799.657:40): arch=c000003e syscall=2 success=yes exit=9 a0=632b70 a1=0 a2=0 a3=362a9519f0 items=0 ppid=1 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192016799.657:41): avc:  denied  { getattr } for  pid=3837 comm="packagekitd" path="/proc/3834/stat" dev=proc ino=20172 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=file
>type=SYSCALL msg=audit(1192016799.657:41): arch=c000003e syscall=5 success=yes exit=0 a0=9 a1=7fffd72ea5b0 a2=7fffd72ea5b0 a3=362a9519f0 items=0 ppid=1 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1192016822.339:42): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=3837 comm="packagekitd" sig=11
>type=ANOM_ABEND msg=audit(1192016871.763:43): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=3851 comm="packagekitd" sig=11
>type=ANOM_ABEND msg=audit(1192017063.642:44): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=3864 comm="packagekitd" sig=11
>type=AVC msg=audit(1192017256.924:45): avc:  denied  { getsched } for  pid=3928 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192017256.924:45): arch=c000003e syscall=143 success=yes exit=0 a0=f58 a1=2aaaab107068 a2=7fff1afc1a70 a3=0 items=0 ppid=3927 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1192017256.988:46): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=3928 comm="packagekitd" sig=11
>type=USER_AUTH msg=audit(1192017288.169:47): user pid=3947 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192017288.178:48): user pid=3947 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192017288.180:49): user pid=3947 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192017288.182:50): user pid=3947 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192017288.182:51): user pid=3947 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192017288.183:52): user pid=3947 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192017601.485:53): user pid=4051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192017601.487:54): avc:  denied  { search } for  pid=4051 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192017601.487:54): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2357 pid=4051 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192017661.169:55): user pid=4064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192017747.599:56): user pid=4094 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192017747.606:57): user pid=4094 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192017747.607:58): user pid=4094 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192017747.610:59): user pid=4094 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192017747.610:60): user pid=4094 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192017747.611:61): user pid=4094 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/bin/yumdownloader" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192017768.168:62): user pid=4100 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192017768.170:63): user pid=4100 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192017768.170:64): user pid=4100 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192017768.171:65): user pid=4100 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018057.275:66): user pid=4196 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018057.276:67): user pid=4196 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018057.277:68): user pid=4196 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018057.277:69): user pid=4196 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018077.622:70): user pid=4199 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018077.623:71): user pid=4199 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018077.624:72): user pid=4199 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018077.624:73): user pid=4199 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018128.328:74): user pid=4211 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018128.329:75): user pid=4211 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018128.330:76): user pid=4211 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018128.330:77): user pid=4211 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018142.310:78): user pid=4212 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018142.312:79): user pid=4212 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018142.312:80): user pid=4212 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018142.313:81): user pid=4212 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018169.044:82): user pid=4214 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018169.046:83): user pid=4214 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018169.046:84): user pid=4214 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018169.047:85): user pid=4214 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018182.385:86): user pid=4215 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018182.387:87): user pid=4215 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018182.387:88): user pid=4215 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018182.388:89): user pid=4215 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/bin/yumdownloader" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018197.682:90): user pid=4217 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018197.685:91): user pid=4217 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018197.685:92): user pid=4217 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018197.686:93): user pid=4217 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018226.915:94): user pid=4227 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018226.916:95): user pid=4227 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018226.917:96): user pid=4227 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018226.917:97): user pid=4227 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018233.968:98): user pid=4228 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018233.970:99): user pid=4228 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018233.970:100): user pid=4228 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018233.971:101): user pid=4228 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018237.966:102): user pid=4230 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018237.967:103): user pid=4230 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018237.968:104): user pid=4230 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018237.968:105): user pid=4230 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018247.521:106): user pid=4241 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018247.523:107): user pid=4241 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018247.523:108): user pid=4241 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018247.524:109): user pid=4241 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018266.828:110): user pid=4245 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018266.830:111): user pid=4245 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018266.831:112): user pid=4245 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018266.831:113): user pid=4245 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/bin/yumdownloader" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018279.150:114): user pid=4247 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018279.152:115): user pid=4247 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018279.152:116): user pid=4247 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018279.153:117): user pid=4247 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018285.438:118): user pid=4248 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018285.440:119): user pid=4248 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018285.440:120): user pid=4248 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018285.441:121): user pid=4248 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018393.641:122): user pid=4270 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018393.643:123): user pid=4270 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018393.644:124): user pid=4270 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018393.645:125): user pid=4270 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192018501.318:126): user pid=16315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192018501.320:127): avc:  denied  { search } for  pid=16315 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192018501.320:127): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2357 pid=16315 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=CRED_ACQ msg=audit(1192018590.112:128): user pid=16324 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018590.114:129): user pid=16324 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018590.115:130): user pid=16324 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018590.116:131): user pid=16324 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192018631.313:132): user pid=16329 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192018631.316:133): user pid=16329 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192018631.316:134): user pid=16329 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192018631.317:135): user pid=16329 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192019401.047:136): user pid=19357 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192019401.050:137): avc:  denied  { search } for  pid=19357 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192019401.050:137): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2357 pid=19357 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192019723.112:138): user pid=19471 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192019723.120:139): user pid=19471 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192019723.121:140): user pid=19471 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192019723.131:141): user pid=19471 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192019723.131:142): user pid=19471 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192019723.132:143): user pid=19471 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192019769.698:144): user pid=19532 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192019769.700:145): user pid=19532 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192019769.700:146): user pid=19532 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192019769.701:147): user pid=19532 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192019781.300:148): user pid=2704 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192019781.301:149): user pid=2704 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1192019793.044:150): user pid=2629 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1192019793.052:151): user pid=2629 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1192019793.056:152): login pid=2629 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1192019793.129:153): user pid=2629 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1192019793.137:154): user pid=2629 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1192019793.138:155): user pid=2629 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1192019793.139:156): user pid=2629 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1192019852.476:157): avc:  denied  { name_bind } for  pid=20111 comm="xinetd" src=119 scontext=system_u:system_r:inetd_t:s0 tcontext=system_u:object_r:innd_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1192019852.476:157): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fffa9dd8670 a2=1c a3=0 items=0 ppid=1 pid=20111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xinetd" exe="/usr/sbin/xinetd" subj=system_u:system_r:inetd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1192019871.058:158): user pid=2630 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1192019871.067:159): user pid=2630 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1192019871.071:160): login pid=2630 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1192019871.105:161): user pid=2630 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1192019871.114:162): user pid=2630 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1192019871.115:163): user pid=2630 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1192019871.121:164): user pid=2630 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1192020301.474:165): user pid=20723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192020301.476:166): avc:  denied  { search } for  pid=20723 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192020301.476:166): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2357 pid=20723 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1192020587.982:167): user pid=2630 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1192020588.023:168): user pid=2630 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CHAUTHTOK msg=audit(1192020681.526:169): user pid=20830 uid=0 auid=0 subj=root:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=nscd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=CRED_DISP msg=audit(1192020793.950:170): user pid=2629 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1192020793.955:171): user pid=2629 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1192020803.574:8744): auditd normal halt, sending auid=4294967295 pid=21293 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1806
>type=DAEMON_START msg=audit(1192020898.441:3314): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1813 res=success, auditd pid=1813
>type=CONFIG_CHANGE msg=audit(1192020898.546:8): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1192020898.550:9): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1192020898.685:10): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1192020898.685:11): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1192020913.493:12): avc:  denied  { name_bind } for  pid=2131 comm="xinetd" src=119 scontext=system_u:system_r:inetd_t:s0 tcontext=system_u:object_r:innd_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1192020913.493:12): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fff63126c50 a2=1c a3=0 items=0 ppid=1 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xinetd" exe="/usr/sbin/xinetd" subj=system_u:system_r:inetd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1192021005.021:13): user pid=2709 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192021005.057:14): user pid=2709 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1192021005.060:15): user pid=2709 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1192021005.064:16): login pid=2709 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1192021005.103:17): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192021005.164:18): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1192021005.166:19): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1192021044.904:20): user pid=3114 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192021044.913:21): user pid=3114 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192021044.914:22): user pid=3114 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192021044.924:23): user pid=3114 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192021044.925:24): user pid=3114 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192021044.926:25): user pid=3114 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=AVC msg=audit(1192021119.597:26): avc:  denied  { read write } for  pid=2714 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=491533 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192021119.597:26): arch=c000003e syscall=30 success=yes exit=-807538688 a0=7800d a1=0 a2=0 a3=0 items=0 ppid=2709 pid=2714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192021133.685:27): user pid=3461 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192021133.694:28): user pid=3461 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192021133.696:29): user pid=3461 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192021133.700:30): user pid=3461 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192021133.700:31): user pid=3461 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192021133.701:32): user pid=3461 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/1 res=success)'
>type=USER_LOGIN msg=audit(1192021142.046:33): user pid=3465 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.5, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1192021142.063:34): user pid=3465 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192021142.088:35): user pid=3465 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192021142.091:36): login pid=3465 uid=0 old auid=4294967295 new auid=10464
>type=USER_START msg=audit(1192021142.092:37): user pid=3465 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192021142.094:38): user pid=3468 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192021142.165:39): user pid=3465 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=10464: exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=/dev/pts/2 res=success)'
>type=USER_ACCT msg=audit(1192021201.907:40): user pid=3583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192021201.907:41): user pid=3584 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192021201.910:42): avc:  denied  { search } for  pid=3584 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192021201.910:42): arch=c000003e syscall=80 success=yes exit=0 a0=698205 a1=698370 a2=0 a3=0 items=0 ppid=2363 pid=3584 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192021261.045:43): user pid=3780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192021261.046:44): user pid=3781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192021321.098:45): user pid=3834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192021381.385:46): user pid=3863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192021389.220:47): user pid=3465 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_END msg=audit(1192021389.222:48): user pid=3465 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192021441.641:49): user pid=3878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192021501.721:50): user pid=3913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192021561.802:51): user pid=3920 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192021621.883:52): user pid=3926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192021681.962:53): user pid=3932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_LOGIN msg=audit(1192021736.514:54): user pid=3939 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.5, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1192021736.530:55): user pid=3939 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192021736.554:56): user pid=3939 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192021736.557:57): login pid=3939 uid=0 old auid=4294967295 new auid=10464
>type=USER_START msg=audit(1192021736.558:58): user pid=3939 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192021736.561:59): user pid=3942 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192021736.566:60): user pid=3939 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=10464: exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1192021741.044:61): user pid=3982 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192021801.129:62): user pid=4001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192021861.216:63): user pid=4008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192021921.363:64): user pid=4014 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192021955.133:65): user pid=4020 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192021955.153:66): user pid=4020 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192021955.155:67): login pid=4020 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192021955.156:68): user pid=4020 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192021955.159:69): user pid=4023 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192021960.884:70): user pid=4020 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192021960.885:71): user pid=4020 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192021981.445:72): user pid=4056 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022001.457:73): user pid=4066 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192022001.476:74): user pid=4066 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192022001.478:75): login pid=4066 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192022001.479:76): user pid=4066 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192022001.481:77): user pid=4069 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192022001.646:78): user pid=4066 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192022001.647:79): user pid=4066 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192022041.536:80): user pid=4102 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192022050.785:81): user pid=3939 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_END msg=audit(1192022050.786:82): user pid=3939 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192022101.615:83): user pid=4119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192022101.617:84): avc:  denied  { search } for  pid=4119 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192022101.617:84): arch=c000003e syscall=80 success=yes exit=0 a0=698205 a1=698370 a2=0 a3=0 items=0 ppid=2363 pid=4119 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192022101.619:85): user pid=4118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022161.147:86): user pid=4154 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022221.232:87): user pid=4161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022281.468:88): user pid=4169 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022341.912:89): user pid=4178 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022401.385:90): user pid=4196 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022461.024:91): user pid=4208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022521.102:92): user pid=4217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022581.197:93): user pid=4224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022641.277:94): user pid=4232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022701.358:95): user pid=4249 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022761.138:96): user pid=4265 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022821.669:97): user pid=4274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022881.750:98): user pid=4289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192022941.836:99): user pid=4297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023001.917:100): user pid=4315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023001.917:101): user pid=4316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023061.033:102): user pid=4327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023096.476:103): user pid=4332 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192023096.500:104): user pid=4332 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192023096.503:105): login pid=4332 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192023096.503:106): user pid=4332 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192023096.506:107): user pid=4335 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192023096.516:108): user pid=4332 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1192023121.156:109): user pid=4391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023181.238:110): user pid=4398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192023200.472:111): user pid=4409 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192023200.479:112): user pid=4409 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192023200.480:113): user pid=4409 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192023200.483:114): user pid=4409 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192023200.484:115): user pid=4409 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192023200.485:116): user pid=4409 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192023241.316:117): user pid=4414 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023301.395:118): user pid=4440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023361.474:119): user pid=4453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023421.559:120): user pid=4463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1192023456.741:121): user pid=4474 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192023456.742:122): user pid=4474 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192023456.743:123): user pid=4474 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192023456.743:124): user pid=4474 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1192023475.775:125): user pid=4332 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192023475.777:126): user pid=4332 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192023481.693:127): user pid=4491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023541.771:128): user pid=4499 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023601.851:129): user pid=4517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023661.928:130): user pid=4525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023721.015:131): user pid=4532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023781.094:132): user pid=4539 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023841.175:133): user pid=4547 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023901.254:134): user pid=4612 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192023901.254:135): user pid=4613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192023901.256:136): avc:  denied  { search } for  pid=4613 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192023901.256:136): arch=c000003e syscall=80 success=yes exit=0 a0=698205 a1=698370 a2=0 a3=0 items=0 ppid=2363 pid=4613 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192023961.138:137): user pid=4653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024021.220:138): user pid=4684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1192024044.500:139): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192024044.501:140): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192024081.299:141): user pid=4732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024141.386:142): user pid=4742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024201.467:143): user pid=4748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024261.532:144): user pid=4754 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024321.600:145): user pid=4759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024381.757:146): user pid=4764 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024441.837:147): user pid=4770 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024501.905:148): user pid=4776 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024561.972:149): user pid=4784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024621.037:150): user pid=4789 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024681.105:151): user pid=4794 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024741.171:152): user pid=4800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024801.238:153): user pid=4806 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192024861.286:154): user pid=4812 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192025701.332:155): user pid=4840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192025701.333:156): avc:  denied  { search } for  pid=4840 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192025701.333:156): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=4840 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192026601.836:157): user pid=4868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192027501.836:158): user pid=4896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192028401.234:159): user pid=4926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192028461.582:160): user pid=4932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192029301.626:161): user pid=4960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192030201.299:162): user pid=4988 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192031101.574:163): user pid=5016 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192032001.306:164): user pid=5046 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192032061.872:165): user pid=5052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192032901.913:166): user pid=5080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192033801.292:167): user pid=5108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192034701.353:168): user pid=5136 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192035601.139:169): user pid=5166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192035661.399:170): user pid=5172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192036501.443:171): user pid=5200 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192037401.814:172): user pid=5228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192038301.530:173): user pid=5256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192039201.212:174): user pid=5286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192039261.639:175): user pid=5292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192040101.679:176): user pid=5320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192041001.606:177): user pid=5348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192041901.648:178): user pid=5376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192042801.420:179): user pid=5406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192042861.969:180): user pid=5412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192043701.012:181): user pid=5440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192044601.678:182): user pid=5468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192045501.258:183): user pid=5496 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192046401.277:184): user pid=5526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192046461.438:185): user pid=5532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192047301.481:186): user pid=5560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192048201.300:187): user pid=5588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192048903.781:188): user pid=5610 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192048903.805:189): user pid=5610 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192048903.809:190): login pid=5610 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192048903.809:191): user pid=5610 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192048903.812:192): user pid=5613 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192048903.879:193): user pid=5610 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1192049101.787:194): user pid=5683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192049816.114:195): user pid=5610 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192049816.118:196): user pid=5610 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192049831.973:197): user pid=6102 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192049831.996:198): user pid=6102 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192049831.998:199): login pid=6102 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192049831.999:200): user pid=6102 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192049832.001:201): user pid=6105 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192049832.179:202): user pid=6102 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1192050001.021:203): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192050001.023:204): avc:  denied  { search } for  pid=6166 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192050001.023:204): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=6166 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192050061.852:205): user pid=6177 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192050446.437:206): user pid=19918 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192050446.458:207): user pid=19918 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192050446.460:208): login pid=19918 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192050446.461:209): user pid=19918 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192050446.464:210): user pid=19921 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192050446.540:211): user pid=19918 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/1 res=success)'
>type=CRED_DISP msg=audit(1192050517.420:212): user pid=19918 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192050517.422:213): user pid=19918 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192050901.896:214): user pid=21313 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192050901.898:215): avc:  denied  { search } for  pid=21313 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192050901.898:215): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=21313 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192051801.759:216): user pid=22719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192051801.761:217): avc:  denied  { search } for  pid=22719 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192051801.761:217): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=22719 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192052644.807:218): user pid=9786 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192052644.816:219): user pid=9786 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192052644.817:220): user pid=9786 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192052644.819:221): user pid=9786 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192052644.820:222): user pid=9786 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192052644.820:223): user pid=9786 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192052701.538:224): user pid=9806 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192052783.198:225): user pid=6102 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192052783.200:226): user pid=6102 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192053053.587:227): user pid=9833 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192053053.611:228): user pid=9833 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192053053.614:229): login pid=9833 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192053053.615:230): user pid=9833 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192053053.618:231): user pid=9836 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192053053.767:232): user pid=9833 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1192053601.860:233): user pid=9913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192053601.862:234): avc:  denied  { search } for  pid=9913 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192053601.862:234): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=9913 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192053661.288:235): user pid=9930 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192054501.334:236): user pid=9958 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192054950.144:237): user pid=9994 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192054950.152:238): user pid=9994 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192054950.153:239): user pid=9994 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192054950.156:240): user pid=9994 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192054950.156:241): user pid=9994 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192054950.158:242): user pid=9994 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/sbin/fetchnews" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192055401.066:243): user pid=10027 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192055670.829:244): user pid=9833 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192055670.830:245): user pid=9833 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192056301.036:246): user pid=10060 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192056301.038:247): avc:  denied  { search } for  pid=10060 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192056301.038:247): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=10060 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192057201.753:248): user pid=10090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192057261.251:249): user pid=10096 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192058101.295:250): user pid=10124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192059001.827:251): user pid=10152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192059901.297:252): user pid=10180 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192060801.795:253): user pid=10210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192060861.769:254): user pid=10216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192061701.813:255): user pid=10244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192062601.519:256): user pid=10272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192063501.481:257): user pid=10300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192064401.726:258): user pid=10330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192064461.285:259): user pid=10336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192064761.326:260): user pid=10350 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192064771.650:261): avc:  denied  { use } for  pid=10406 comm="vpnc" path="pipe:[125070]" dev=pipefs ino=125070 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1192064771.650:261): avc:  denied  { read } for  pid=10406 comm="vpnc" path="pipe:[125070]" dev=pipefs ino=125070 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=AVC msg=audit(1192064771.650:261): avc:  denied  { write } for  pid=10406 comm="vpnc" path="pipe:[125071]" dev=pipefs ino=125071 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192064771.650:261): arch=c000003e syscall=59 success=yes exit=0 a0=6c7010 a1=6c78f0 a2=714370 a3=0 items=0 ppid=10381 pid=10406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192064771.654:262): avc:  denied  { ioctl } for  pid=10406 comm="vpnc" path="pipe:[125070]" dev=pipefs ino=125070 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192064771.654:262): arch=c000003e syscall=16 success=no exit=-22 a0=0 a1=5401 a2=7ffff72719b0 a3=240 items=0 ppid=10381 pid=10406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192064771.654:263): avc:  denied  { getattr } for  pid=10406 comm="vpnc" path="pipe:[125070]" dev=pipefs ino=125070 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192064771.654:263): arch=c000003e syscall=5 success=yes exit=0 a0=0 a1=7ffff72718c0 a2=7ffff72718c0 a3=240 items=0 ppid=10381 pid=10406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192065301.627:264): user pid=10444 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192066201.160:265): user pid=10472 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192067101.153:266): user pid=10500 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192068001.204:267): user pid=10530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192068061.128:268): user pid=10536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192068121.167:269): user pid=10543 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192068901.174:270): user pid=10574 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192069801.233:271): user pid=10602 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192070701.196:272): user pid=10630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192071601.571:273): user pid=15878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192071661.481:274): user pid=16092 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1192072298.543:275): user pid=18619 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1192072298.543:276): user pid=18619 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1192072298.653:277): user pid=18619 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1192072298.653:278): user pid=18619 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192072501.748:279): user pid=18665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192072501.751:280): avc:  denied  { search } for  pid=18665 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192072501.751:280): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=18665 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192073401.635:281): user pid=18693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192074301.490:282): user pid=18721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192075201.880:283): user pid=18751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192075261.174:284): user pid=18757 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192076101.218:285): user pid=18785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192077001.597:286): user pid=18813 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192077901.775:287): user pid=18841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192078801.037:288): user pid=18871 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192078862.009:289): user pid=18877 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192079701.050:290): user pid=18905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192080601.896:291): user pid=18933 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192081501.032:292): user pid=18961 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192082401.011:293): user pid=18991 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192082461.333:294): user pid=18997 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192083301.374:295): user pid=19025 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192084201.407:296): user pid=19053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192085101.442:297): user pid=19081 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192086001.233:298): user pid=19111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192086061.124:299): user pid=19117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192086601.166:300): user pid=19137 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192086901.717:301): user pid=19154 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192087801.935:302): user pid=19182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192088701.457:303): user pid=19210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192089601.390:304): user pid=19240 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192089661.396:305): user pid=19246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192090501.440:306): user pid=19274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192091102.865:307): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192091102.874:308): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1192091102.875:309): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1192091102.883:310): login pid=2709 uid=0 old auid=500 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1192091102.938:311): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192091102.956:312): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1192091102.957:313): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1192091106.706:314): avc:  denied  { getsched } for  pid=19476 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192091106.706:314): arch=c000003e syscall=143 success=yes exit=0 a0=4c14 a1=2aaaaaad6b38 a2=7fffa3cec7a0 a3=782f73747865746e items=0 ppid=19475 pid=19476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192091106.960:315): avc:  denied  { write } for  pid=19476 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192091106.960:315): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=19475 pid=19476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192091106.969:316): avc:  denied  { write } for  pid=19476 comm="packagekitd" name="PackageKit" dev=dm-1 ino=1671390 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir
>type=AVC msg=audit(1192091106.969:316): avc:  denied  { add_name } for  pid=19476 comm="packagekitd" name="transactions.db-journal" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir
>type=AVC msg=audit(1192091106.969:316): avc:  denied  { create } for  pid=19476 comm="packagekitd" name="transactions.db-journal" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1192091106.969:316): arch=c000003e syscall=2 success=yes exit=9 a0=62f826 a1=c2 a2=1a4 a3=0 items=0 ppid=19475 pid=19476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192091106.973:317): avc:  denied  { getattr } for  pid=19476 comm="packagekitd" path="/var/db/PackageKit/transactions.db-journal" dev=dm-1 ino=1178887 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1192091106.973:317): arch=c000003e syscall=5 success=yes exit=0 a0=9 a1=7fffa3ceb6a0 a2=7fffa3ceb6a0 a3=0 items=0 ppid=19475 pid=19476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192091106.973:318): avc:  denied  { read } for  pid=19476 comm="packagekitd" name="PackageKit" dev=dm-1 ino=1671390 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192091106.973:318): arch=c000003e syscall=2 success=yes exit=10 a0=62f803 a1=0 a2=0 a3=3591b509f0 items=0 ppid=19475 pid=19476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192091106.973:319): avc:  denied  { write } for  pid=19476 comm="packagekitd" path="/var/db/PackageKit/transactions.db-journal" dev=dm-1 ino=1178887 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1192091106.973:319): arch=c000003e syscall=1 success=yes exit=24 a0=9 a1=7fffa3ceb840 a2=18 a3=3591b509f0 items=0 ppid=19475 pid=19476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192091107.602:320): avc:  denied  { write } for  pid=19476 comm="packagekitd" path="/var/db/PackageKit/transactions.db-journal" dev=dm-1 ino=1178887 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1192091107.602:320): arch=c000003e syscall=1 success=yes exit=4 a0=9 a1=7fffa3ceb7c0 a2=4 a3=0 items=0 ppid=19475 pid=19476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192091107.941:321): avc:  denied  { write } for  pid=19476 comm="packagekitd" name="PackageKit" dev=dm-1 ino=1671390 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir
>type=AVC msg=audit(1192091107.941:321): avc:  denied  { remove_name } for  pid=19476 comm="packagekitd" name="transactions.db-journal" dev=dm-1 ino=1178887 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir
>type=AVC msg=audit(1192091107.941:321): avc:  denied  { unlink } for  pid=19476 comm="packagekitd" name="transactions.db-journal" dev=dm-1 ino=1178887 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1192091107.941:321): arch=c000003e syscall=87 success=yes exit=0 a0=62f826 a1=6332f0 a2=41 a3=0 items=0 ppid=19475 pid=19476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192091107.945:322): avc:  denied  { create } for  pid=19476 comm="packagekitd" name="transactions.db-journal" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1192091107.945:322): arch=c000003e syscall=2 success=yes exit=9 a0=62f826 a1=c2 a2=1a4 a3=0 items=0 ppid=19475 pid=19476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192091107.945:323): avc:  denied  { getattr } for  pid=19476 comm="packagekitd" path="/var/db/PackageKit/transactions.db-journal" dev=dm-1 ino=1178887 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1192091107.945:323): arch=c000003e syscall=5 success=yes exit=0 a0=9 a1=7fffa3ceb6b0 a2=7fffa3ceb6b0 a3=0 items=0 ppid=19475 pid=19476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_AVC msg=audit(1192091108.065:324): user pid=2001 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.38 spid=19476 tpid=19458 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AUTH msg=audit(1192091133.997:325): user pid=19635 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192091133.998:326): user pid=19635 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192091134.051:327): user pid=19635 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1192091144.128:328): user pid=19635 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1192091189.322:329): user pid=19672 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192091189.331:330): user pid=19672 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192091189.333:331): user pid=19672 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192091189.344:332): user pid=19672 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192091189.344:333): user pid=19672 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192091189.345:334): user pid=19672 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1192091270.758:335): user pid=19750 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192091270.765:336): user pid=19750 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192091270.767:337): user pid=19750 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192091270.774:338): user pid=19750 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192091270.775:339): user pid=19750 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192091270.776:340): user pid=19750 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192091401.619:341): user pid=19816 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192091401.621:342): avc:  denied  { search } for  pid=19816 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192091401.621:342): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=19816 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192091695.553:343): user pid=19971 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192091695.553:344): user pid=19971 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192091695.570:345): user pid=19971 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1192091696.171:346): avc:  denied  { read write } for  pid=4706 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=1736722 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192091696.171:346): arch=c000003e syscall=30 success=yes exit=-813178880 a0=1a8012 a1=0 a2=0 a3=0 items=0 ppid=2709 pid=4706 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192092301.226:347): user pid=20017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192092441.514:348): avc:  denied  { getsched } for  pid=20029 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192092441.514:348): arch=c000003e syscall=143 success=yes exit=0 a0=4e3d a1=2aaaaaad6b38 a2=7fffad945400 a3=782f73747865746e items=0 ppid=20028 pid=20029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192092441.522:349): avc:  denied  { write } for  pid=20029 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192092441.522:349): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=20028 pid=20029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192093201.369:350): user pid=20063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192093261.185:351): user pid=20069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1192093432.923:352): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=20081 comm="packagekitd" sig=11
>type=AVC msg=audit(1192093432.947:353): avc:  denied  { write } for  pid=20086 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192093432.947:353): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=20085 pid=20086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192094101.282:354): user pid=20107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192094101.283:355): avc:  denied  { search } for  pid=20107 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192094101.283:355): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=20107 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192095001.338:356): user pid=20145 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192095901.696:357): user pid=20177 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192096801.286:358): user pid=20212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192096861.892:359): user pid=20218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192097701.934:360): user pid=20246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192098601.336:361): user pid=20279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192099501.336:362): user pid=20307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192100401.524:363): user pid=20344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192100461.657:364): user pid=20350 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192100701.404:365): user pid=20362 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192100701.509:366): user pid=20362 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192100701.512:367): login pid=20362 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192100701.513:368): user pid=20362 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192100701.516:369): user pid=20365 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192100701.551:370): user pid=20362 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=/dev/pts/1 res=success)'
>type=CRED_DISP msg=audit(1192100801.766:371): user pid=20362 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192100801.767:372): user pid=20362 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192100869.777:373): user pid=20400 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192100869.795:374): user pid=20400 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192100869.797:375): login pid=20400 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192100869.798:376): user pid=20400 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192100869.801:377): user pid=20403 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192100869.806:378): user pid=20400 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1192101301.704:379): user pid=20446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192101301.706:380): avc:  denied  { search } for  pid=20446 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192101301.706:380): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=20446 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192102201.434:381): user pid=20479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192102291.499:382): user pid=20485 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192102291.508:383): user pid=20485 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192102291.509:384): user pid=20485 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192102291.519:385): user pid=20485 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192102291.519:386): user pid=20485 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192102291.521:387): user pid=20485 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1192102339.667:388): user pid=20400 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192102339.668:389): user pid=20400 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192102945.506:390): user pid=20545 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192102945.527:391): user pid=20545 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192102945.529:392): login pid=20545 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192102945.530:393): user pid=20545 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192102945.533:394): user pid=20548 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192102945.539:395): user pid=20545 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=/dev/pts/1 res=success)'
>type=USER_AUTH msg=audit(1192102989.293:396): user pid=20571 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192102989.300:397): user pid=20571 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192102989.301:398): user pid=20571 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192102989.312:399): user pid=20571 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192102989.312:400): user pid=20571 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192102989.313:401): user pid=20571 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1192103054.454:402): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=20651 comm="pkcon" sig=6
>type=CRED_ACQ msg=audit(1192103063.178:403): user pid=20654 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192103063.184:404): user pid=20654 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192103063.184:405): user pid=20654 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192103063.185:406): user pid=20654 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1192103064.230:407): user pid=20545 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192103064.231:408): user pid=20545 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192103068.327:409): user pid=20693 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192103068.346:410): user pid=20693 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192103068.349:411): login pid=20693 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192103068.349:412): user pid=20693 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192103068.352:413): user pid=20696 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192103068.493:414): user pid=20693 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=/dev/pts/1 res=success)'
>type=AVC msg=audit(1192103077.966:415): avc:  denied  { getsched } for  pid=20730 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192103077.966:415): arch=c000003e syscall=143 success=yes exit=0 a0=50fa a1=2aaaaaad6b38 a2=7fff6a4d4f90 a3=782f73747865746e items=0 ppid=20729 pid=20730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192103077.973:416): avc:  denied  { write } for  pid=20730 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192103077.973:416): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=20729 pid=20730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1192103085.458:417): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=20730 comm="packagekitd" sig=11
>type=AVC msg=audit(1192103085.485:418): avc:  denied  { write } for  pid=20736 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192103085.485:418): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=20735 pid=20736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=CRED_DISP msg=audit(1192103096.575:419): user pid=20693 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192103096.576:420): user pid=20693 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192103101.691:421): user pid=20737 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192103101.693:422): avc:  denied  { search } for  pid=20737 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192103101.693:422): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=20737 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1192103177.842:423): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=20750 comm="packagekitd" sig=11
>type=USER_END msg=audit(1192103192.708:424): user pid=19971 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1192103231.275:425): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=20756 comm="packagekitd" sig=11
>type=USER_AUTH msg=audit(1192103246.492:426): user pid=20769 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192103246.501:427): user pid=20769 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192103246.518:428): user pid=20769 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192103246.520:429): user pid=20769 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192103246.521:430): user pid=20769 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192103246.522:431): user pid=20769 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm/kompiliste/packagekit/libpackagekit" cmd="/usr/bin/yum" (terminal=pts/2 res=success)'
>type=ANOM_ABEND msg=audit(1192103286.664:432): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=19644 comm="dbus-launch" sig=6
>type=AVC msg=audit(1192103293.156:433): avc:  denied  { getsched } for  pid=20795 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192103293.156:433): arch=c000003e syscall=143 success=yes exit=0 a0=513b a1=2aaaaaad6b38 a2=7fff907d3290 a3=782f73747865746e items=0 ppid=20794 pid=20795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192103293.163:434): avc:  denied  { write } for  pid=20795 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192103293.163:434): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=20794 pid=20795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=CRED_ACQ msg=audit(1192103320.484:435): user pid=20799 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192103320.487:436): user pid=20799 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192103320.487:437): user pid=20799 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192103320.488:438): user pid=20799 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm/kompiliste/packagekit/libpackagekit" cmd="/usr/bin/yum" (terminal=pts/2 res=success)'
>type=AVC msg=audit(1192103526.492:439): avc:  denied  { name_connect } for  pid=2378 comm="squid" dest=8088 scontext=system_u:system_r:squid_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1192103526.492:439): arch=c000003e syscall=42 success=no exit=-115 a0=e a1=d6f524 a2=10 a3=d66600 items=0 ppid=2375 pid=2378 auid=4294967295 uid=23 gid=23 euid=23 suid=0 fsuid=23 egid=23 sgid=23 fsgid=23 tty=(none) comm="squid" exe="/usr/sbin/squid" subj=system_u:system_r:squid_t:s0 key=(null)
>type=USER_AUTH msg=audit(1192103706.825:440): user pid=20842 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_AUTH msg=audit(1192103710.389:441): user pid=20842 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192103710.397:442): user pid=20842 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192103710.398:443): user pid=20842 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192103710.399:444): user pid=20842 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192103710.400:445): user pid=20842 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192103710.401:446): user pid=20842 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm/kompiliste/packagekit/libpackagekit" cmd="/usr/bin/yum" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192104001.547:447): user pid=20878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192104001.549:448): avc:  denied  { search } for  pid=20878 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192104001.549:448): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=20878 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192104061.606:449): user pid=20884 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192104901.653:450): user pid=20912 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192104959.819:451): user pid=20980 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192104959.827:452): user pid=20980 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192104959.828:453): user pid=20980 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192104959.836:454): user pid=20980 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192104959.836:455): user pid=20980 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192104959.838:456): user pid=20980 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192104983.681:457): user pid=21023 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192104983.688:458): user pid=21023 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192104983.688:459): user pid=21023 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192104983.689:460): user pid=21023 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192105060.797:461): user pid=21092 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192105060.804:462): user pid=21092 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192105060.805:463): user pid=21092 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192105060.806:464): user pid=21092 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192105104.172:465): user pid=21136 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192105104.174:466): user pid=21136 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192105104.175:467): user pid=21136 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192105104.176:468): user pid=21136 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/debuginfo-install" (terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192105110.876:469): user pid=21137 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192105110.878:470): user pid=21137 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192105110.878:471): user pid=21137 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192105110.879:472): user pid=21137 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/debuginfo-install" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192105801.611:473): user pid=21165 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192105801.613:474): avc:  denied  { search } for  pid=21165 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192105801.613:474): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=21165 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192105962.605:475): user pid=21231 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192105962.612:476): user pid=21231 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192105962.613:477): user pid=21231 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192105962.622:478): user pid=21231 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192105962.622:479): user pid=21231 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192105962.623:480): user pid=21231 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=AVC msg=audit(1192106624.132:481): avc:  denied  { getsched } for  pid=21460 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192106624.132:481): arch=c000003e syscall=143 success=yes exit=0 a0=53d4 a1=2aaaaaad6b38 a2=7fffbd8d5390 a3=782f73747865746e items=0 ppid=21459 pid=21460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192106624.139:482): avc:  denied  { write } for  pid=21460 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192106624.139:482): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=21459 pid=21460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1192106654.679:483): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=21460 comm="packagekitd" sig=11
>type=ANOM_ABEND msg=audit(1192106686.042:484): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=21475 comm="packagekitd" sig=11
>type=USER_ACCT msg=audit(1192106701.667:485): user pid=21488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1192106703.962:486): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=21484 comm="packagekitd" sig=11
>type=USER_AUTH msg=audit(1192106787.473:487): user pid=21511 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1192106922.912:488): user pid=1145 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192106922.919:489): user pid=1145 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192106922.920:490): user pid=1145 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192106922.924:491): user pid=1145 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192106922.924:492): user pid=1145 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192106922.925:493): user pid=1145 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192107601.544:494): user pid=11243 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192107601.544:495): user pid=11244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192107601.547:496): avc:  denied  { search } for  pid=11244 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192107601.547:496): arch=c000003e syscall=80 success=yes exit=0 a0=698205 a1=698370 a2=0 a3=0 items=0 ppid=2363 pid=11244 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192107661.417:497): user pid=11254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192107661.418:498): user pid=11255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192107721.497:499): user pid=11268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192107774.808:500): user pid=11276 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192107774.832:501): user pid=11276 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192107774.835:502): login pid=11276 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192107774.835:503): user pid=11276 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192107774.837:504): user pid=11279 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192107774.843:505): user pid=11276 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=/dev/pts/2 res=success)'
>type=USER_ACCT msg=audit(1192107781.676:506): user pid=11303 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192107841.759:507): user pid=11320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192107847.429:508): user pid=11325 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192107847.437:509): user pid=11325 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192107847.438:510): user pid=11325 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192107847.441:511): user pid=11325 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192107847.441:512): user pid=11325 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192107847.443:513): user pid=11325 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/etc" cmd="/usr/bin/vim" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192107901.836:514): user pid=11357 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CMD msg=audit(1192107918.292:515): user pid=11362 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/etc" cmd="service" (terminal=pts/2 res=failed)'
>type=USER_CMD msg=audit(1192107929.653:516): user pid=11363 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/etc" cmd="service" (terminal=pts/2 res=failed)'
>type=CRED_ACQ msg=audit(1192107931.475:517): user pid=11364 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192107931.482:518): user pid=11364 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192107931.482:519): user pid=11364 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192107931.484:520): user pid=11364 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192107961.919:521): user pid=11415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1192107963.054:522): user pid=11420 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192107963.058:523): user pid=11420 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192107963.058:524): user pid=11420 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192107963.059:525): user pid=11420 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192108022.000:526): user pid=11484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108081.078:527): user pid=11490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108141.155:528): user pid=11497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108201.232:529): user pid=11504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108261.314:530): user pid=11511 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108321.390:531): user pid=11517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108381.468:532): user pid=11523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108441.547:533): user pid=11533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108501.626:534): user pid=11541 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192108501.627:535): avc:  denied  { search } for  pid=11541 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192108501.627:535): arch=c000003e syscall=80 success=yes exit=0 a0=698205 a1=698370 a2=0 a3=0 items=0 ppid=2363 pid=11541 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192108501.634:536): user pid=11540 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108561.671:537): user pid=11551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108621.755:538): user pid=11557 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108681.833:539): user pid=11566 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108741.345:540): user pid=11577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108801.347:541): user pid=11585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108861.432:542): user pid=11592 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108921.508:543): user pid=11598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192108981.584:544): user pid=11604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109041.661:545): user pid=11613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109101.739:546): user pid=11620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109161.815:547): user pid=11632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109221.891:548): user pid=11638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109281.977:549): user pid=11644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192109311.649:550): user pid=11276 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192109311.651:551): user pid=11276 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192109341.054:552): user pid=11656 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109401.133:553): user pid=11663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109401.133:554): user pid=11664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192109401.135:555): avc:  denied  { search } for  pid=11664 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192109401.135:555): arch=c000003e syscall=80 success=yes exit=0 a0=698205 a1=698370 a2=0 a3=0 items=0 ppid=2363 pid=11664 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192109461.177:556): user pid=11674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109521.425:557): user pid=11680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109581.345:558): user pid=11686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109641.423:559): user pid=11695 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109701.066:560): user pid=11702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109761.145:561): user pid=11709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109821.230:562): user pid=11715 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109881.312:563): user pid=11724 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192109941.418:564): user pid=11731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110001.514:565): user pid=11738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110061.597:566): user pid=11745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110121.856:567): user pid=11751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110181.936:568): user pid=11757 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110241.014:569): user pid=11766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110301.097:570): user pid=11773 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110301.098:571): user pid=11774 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110361.151:572): user pid=11784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110421.229:573): user pid=11790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110481.305:574): user pid=11796 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110541.385:575): user pid=11803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110601.463:576): user pid=11810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110661.542:577): user pid=11817 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110721.621:578): user pid=11823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110781.698:579): user pid=11829 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110841.775:580): user pid=11836 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110901.853:581): user pid=11843 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192110961.929:582): user pid=11857 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192111021.023:583): user pid=11863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192111081.102:584): user pid=11869 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192111141.182:585): user pid=11876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192111201.260:586): user pid=11883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192111261.744:587): user pid=11889 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192112101.790:588): user pid=11917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192113001.578:589): user pid=11952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192113901.338:590): user pid=11981 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192114801.648:591): user pid=12016 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192114861.277:592): user pid=12022 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192115701.321:593): user pid=12054 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192116018.104:594): user pid=12066 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192116018.169:595): user pid=12066 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192116018.172:596): login pid=12066 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192116018.173:597): user pid=12066 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192116018.178:598): user pid=12069 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192116042.911:599): user pid=12066 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192116042.912:600): user pid=12066 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192116043.311:601): user pid=12103 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192116043.342:602): user pid=12103 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192116043.345:603): login pid=12103 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192116043.345:604): user pid=12103 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192116043.349:605): user pid=12106 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192116329.487:606): user pid=12103 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192116329.581:607): user pid=12103 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192116331.728:608): user pid=12192 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192116331.879:609): user pid=12192 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192116331.897:610): login pid=12192 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192116331.897:611): user pid=12192 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192116331.902:612): user pid=12195 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192116333.225:613): user pid=12192 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192116333.226:614): user pid=12192 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192116333.612:615): user pid=12222 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192116333.638:616): user pid=12222 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192116333.640:617): login pid=12222 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192116333.641:618): user pid=12222 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192116333.645:619): user pid=12225 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192116333.799:620): user pid=12222 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192116333.800:621): user pid=12222 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192116601.306:622): user pid=12261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192116601.309:623): avc:  denied  { search } for  pid=12261 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192116601.309:623): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=12261 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192116752.880:624): user pid=12269 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192116752.911:625): user pid=12269 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192116752.914:626): login pid=12269 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192116752.914:627): user pid=12269 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192116752.919:628): user pid=12272 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192116757.229:629): user pid=12269 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192116757.230:630): user pid=12269 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192116757.624:631): user pid=12299 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192116757.650:632): user pid=12299 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192116757.654:633): login pid=12299 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192116757.654:634): user pid=12299 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192116757.658:635): user pid=12302 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192116903.340:636): user pid=12335 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192116903.364:637): user pid=12335 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192116903.367:638): login pid=12335 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192116903.368:639): user pid=12335 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192116903.371:640): user pid=12338 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192116903.447:641): user pid=12335 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=/dev/pts/2 res=success)'
>type=CRED_DISP msg=audit(1192116907.151:642): user pid=12299 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192116907.152:643): user pid=12299 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192116908.411:644): user pid=12362 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192116908.445:645): user pid=12362 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192116908.448:646): login pid=12362 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192116908.449:647): user pid=12362 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192116908.453:648): user pid=12365 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192116908.587:649): user pid=12362 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192116908.588:650): user pid=12362 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192116909.009:651): user pid=12392 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192116909.034:652): user pid=12392 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192116909.037:653): login pid=12392 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192116909.038:654): user pid=12392 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192116909.042:655): user pid=12395 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192116909.163:656): user pid=12392 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192116909.164:657): user pid=12392 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_AUTH msg=audit(1192116914.152:658): user pid=12422 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192116914.160:659): user pid=12422 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192116914.161:660): user pid=12422 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192116914.171:661): user pid=12422 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192116914.171:662): user pid=12422 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192116914.173:663): user pid=12422 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192116930.297:664): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192116930.297:665): user pid=2709 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192116935.643:666): user pid=12335 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192116935.644:667): user pid=12335 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_AUTH msg=audit(1192117152.155:668): user pid=12475 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1192117152.156:669): user pid=12475 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_ACCT msg=audit(1192117184.202:670): user pid=12511 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192117184.238:671): user pid=12511 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192117184.241:672): login pid=12511 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192117184.242:673): user pid=12511 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192117184.246:674): user pid=12514 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192117191.180:675): user pid=12511 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192117191.181:676): user pid=12511 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192117191.929:677): user pid=12541 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192117191.955:678): user pid=12541 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192117191.958:679): login pid=12541 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192117191.959:680): user pid=12541 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192117191.963:681): user pid=12544 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192117251.133:682): user pid=12541 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192117251.134:683): user pid=12541 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192117254.751:684): user pid=12572 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192117254.777:685): user pid=12572 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192117254.780:686): login pid=12572 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192117254.780:687): user pid=12572 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192117254.784:688): user pid=12575 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192117255.270:689): user pid=12572 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192117255.271:690): user pid=12572 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192117255.714:691): user pid=12602 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192117255.735:692): user pid=12602 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192117255.738:693): login pid=12602 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192117255.739:694): user pid=12602 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192117255.743:695): user pid=12605 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192117289.544:696): user pid=12602 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192117289.546:697): user pid=12602 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192117290.299:698): user pid=12632 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192117290.324:699): user pid=12632 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192117290.326:700): login pid=12632 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192117290.326:701): user pid=12632 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192117290.331:702): user pid=12635 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192117290.434:703): user pid=12632 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192117290.435:704): user pid=12632 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192117290.978:705): user pid=12662 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192117291.000:706): user pid=12662 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192117291.002:707): login pid=12662 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192117291.003:708): user pid=12662 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192117291.006:709): user pid=12665 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192117291.108:710): user pid=12662 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192117291.109:711): user pid=12662 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192117501.497:712): user pid=12702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192117501.499:713): avc:  denied  { search } for  pid=12702 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192117501.499:713): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=12702 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192118401.313:714): user pid=12732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192118461.604:715): user pid=12738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192119301.855:716): user pid=12766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192120201.155:717): user pid=12794 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192121101.232:718): user pid=12822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192121736.612:719): user pid=12844 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192121736.637:720): user pid=12844 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192121736.641:721): login pid=12844 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192121736.641:722): user pid=12844 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192121736.644:723): user pid=12847 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192121737.855:724): user pid=12844 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192121737.856:725): user pid=12844 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192122001.149:726): user pid=12858 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192122001.151:727): avc:  denied  { search } for  pid=12858 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192122001.151:727): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=12858 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192122061.923:728): user pid=12864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192122901.970:729): user pid=12892 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192123801.636:730): user pid=12920 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192124701.168:731): user pid=12948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192125601.898:732): user pid=12978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192125661.508:733): user pid=12984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192126501.551:734): user pid=13012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192127401.948:735): user pid=13040 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192128301.538:736): user pid=13068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192129201.660:737): user pid=13098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192129261.206:738): user pid=13104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192130101.248:739): user pid=13132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192131001.357:740): user pid=13160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192131901.735:741): user pid=13188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192132801.414:742): user pid=13218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192132861.986:743): user pid=13224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192133701.028:744): user pid=13252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192134601.715:745): user pid=13280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192135501.718:746): user pid=13308 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192136401.566:747): user pid=13338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192136461.614:748): user pid=13344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192137301.657:749): user pid=13372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192138201.917:750): user pid=13400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192139101.717:751): user pid=13428 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192139986.222:752): user pid=13458 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192139986.243:753): user pid=13458 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192139986.245:754): login pid=13458 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192139986.246:755): user pid=13458 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192139986.248:756): user pid=13461 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192139986.726:757): user pid=13458 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192139986.727:758): user pid=13458 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192139993.476:759): user pid=13463 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192139993.489:760): user pid=13463 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192139993.492:761): login pid=13463 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192139993.492:762): user pid=13463 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192139993.495:763): user pid=13466 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192139993.660:764): user pid=13463 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1192140001.543:765): user pid=13490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192140001.545:766): avc:  denied  { search } for  pid=13490 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192140001.545:766): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=13490 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192140061.286:767): user pid=13496 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192140901.334:768): user pid=13524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192141260.133:769): user pid=13538 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192141260.152:770): user pid=13538 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192141260.155:771): login pid=13538 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192141260.156:772): user pid=13538 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192141260.159:773): user pid=13541 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192141260.232:774): user pid=13538 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1192141776.310:775): user pid=13583 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192141776.328:776): user pid=13583 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192141776.330:777): login pid=13583 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192141776.331:778): user pid=13583 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192141776.334:779): user pid=13586 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192141776.408:780): user pid=13583 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/2 res=success)'
>type=CRED_DISP msg=audit(1192141778.914:781): user pid=13583 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192141778.916:782): user pid=13583 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192141801.376:783): user pid=13610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192141801.378:784): avc:  denied  { search } for  pid=13610 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192141801.378:784): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=13610 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192141918.043:785): user pid=13621 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192141918.051:786): user pid=13621 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192141918.053:787): user pid=13621 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192141918.061:788): user pid=13621 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192141918.061:789): user pid=13621 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192141918.063:790): user pid=13621 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1192141929.837:791): user pid=13538 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192141929.838:792): user pid=13538 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192141931.421:793): user pid=13665 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192141931.444:794): user pid=13665 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192141931.446:795): login pid=13665 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192141931.447:796): user pid=13665 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192141931.449:797): user pid=13668 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192141931.525:798): user pid=13665 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192141937.954:799): user pid=13703 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192141937.964:800): user pid=13703 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192141937.964:801): user pid=13703 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192141937.965:802): user pid=13703 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/sh" (terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1192141944.952:803): user pid=13665 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192141944.954:804): user pid=13665 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192141946.423:805): user pid=13743 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192141946.440:806): user pid=13743 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192141946.442:807): login pid=13743 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192141946.443:808): user pid=13743 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192141946.445:809): user pid=13746 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192141946.515:810): user pid=13743 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192141950.360:811): user pid=13790 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192141950.367:812): user pid=13790 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192141950.367:813): user pid=13790 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192141950.368:814): user pid=13790 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/sh" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192141957.264:815): user pid=13830 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192141957.266:816): user pid=13830 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192141957.266:817): user pid=13830 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192141957.267:818): user pid=13830 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192142701.375:819): user pid=13862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192142701.377:820): avc:  denied  { search } for  pid=13862 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192142701.377:820): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=13862 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192142878.024:821): user pid=13875 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1192142880.930:822): user pid=13875 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192142880.938:823): user pid=13875 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192142880.939:824): user pid=13875 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192142880.942:825): user pid=13875 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192142880.942:826): user pid=13875 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192142880.944:827): user pid=13875 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1192142920.991:828): user pid=13743 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192142920.993:829): user pid=13743 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192143601.417:830): user pid=13918 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192143661.255:831): user pid=13924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192144501.303:832): user pid=13952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192145401.595:833): user pid=13980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192146301.524:834): user pid=14008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192147201.089:835): user pid=14038 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192147261.595:836): user pid=14044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192147868.819:837): user pid=13463 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192147868.820:838): user pid=13463 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192148101.637:839): user pid=14072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192149001.653:840): user pid=14100 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192149901.796:841): user pid=14128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192150801.154:842): user pid=14158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192150861.397:843): user pid=14164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192151161.436:844): user pid=14178 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192151172.050:845): avc:  denied  { use } for  pid=14234 comm="vpnc" path="pipe:[543929]" dev=pipefs ino=543929 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1192151172.050:845): avc:  denied  { read } for  pid=14234 comm="vpnc" path="pipe:[543929]" dev=pipefs ino=543929 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=AVC msg=audit(1192151172.050:845): avc:  denied  { write } for  pid=14234 comm="vpnc" path="pipe:[543930]" dev=pipefs ino=543930 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192151172.050:845): arch=c000003e syscall=59 success=yes exit=0 a0=6c7010 a1=6c78f0 a2=714370 a3=0 items=0 ppid=14209 pid=14234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192151172.211:846): avc:  denied  { ioctl } for  pid=14234 comm="vpnc" path="pipe:[543929]" dev=pipefs ino=543929 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192151172.211:846): arch=c000003e syscall=16 success=no exit=-22 a0=0 a1=5401 a2=7fff9101cdd0 a3=240 items=0 ppid=14209 pid=14234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192151172.211:847): avc:  denied  { getattr } for  pid=14234 comm="vpnc" path="pipe:[543929]" dev=pipefs ino=543929 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192151172.211:847): arch=c000003e syscall=5 success=yes exit=0 a0=0 a1=7fff9101cce0 a2=7fff9101cce0 a3=240 items=0 ppid=14209 pid=14234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192151172.227:848): avc:  denied  { ioctl } for  pid=14235 comm="vpnc-script" path="pipe:[543929]" dev=pipefs ino=543929 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192151172.227:848): arch=c000003e syscall=16 success=no exit=-22 a0=0 a1=5401 a2=7fff9ba6b360 a3=0 items=0 ppid=14234 pid=14235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc-script" exe="/bin/bash" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192151172.721:849): avc:  denied  { write } for  pid=14234 comm="vpnc" path="pipe:[543930]" dev=pipefs ino=543930 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192151172.721:849): arch=c000003e syscall=1 success=yes exit=39 a0=2 a1=7fff9101a4b0 a2=27 a3=32322e3738312e36 items=0 ppid=14209 pid=14234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192151172.721:850): avc:  denied  { read } for  pid=14234 comm="vpnc" path="pipe:[543929]" dev=pipefs ino=543929 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192151172.721:850): arch=c000003e syscall=0 success=yes exit=0 a0=0 a1=2aaaaadef000 a2=400 a3=32322e3738312e36 items=0 ppid=14209 pid=14234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192151172.852:851): avc:  denied  { use } for  pid=14234 comm="vpnc" path="pipe:[543929]" dev=pipefs ino=543929 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fd
>type=SYSCALL msg=audit(1192151172.852:851): arch=c000003e syscall=16 success=no exit=-22 a0=0 a1=5401 a2=7fff9101cd70 a3=240 items=0 ppid=14209 pid=14234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192151701.359:852): user pid=14272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192151701.361:853): avc:  denied  { search } for  pid=14272 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192151701.361:853): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=14272 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192152601.929:854): user pid=14300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192153501.381:855): user pid=14328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192154401.875:856): user pid=14358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192154461.627:857): user pid=14364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192154521.666:858): user pid=14371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192155301.673:859): user pid=14402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192156201.595:860): user pid=14430 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192157101.086:861): user pid=14458 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1192157912.293:862): user pid=15185 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1192157912.293:863): user pid=15185 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1192157912.400:864): user pid=15185 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1192157912.401:865): user pid=15185 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192158001.831:866): user pid=15227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192158061.922:867): user pid=15233 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192158901.966:868): user pid=15261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192159801.348:869): user pid=15289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192160701.778:870): user pid=15317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192161601.250:871): user pid=15347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192161661.271:872): user pid=15353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192162501.316:873): user pid=15381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192163401.068:874): user pid=15409 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192164301.704:875): user pid=15437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192165201.186:876): user pid=15467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192165261.959:877): user pid=15473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192165790.118:878): user pid=12475 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=kasal exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192165790.126:879): user pid=12475 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=kasal exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1192165790.128:880): user pid=12475 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1192165790.131:881): login pid=12475 uid=0 old auid=4294967295 new auid=10464
>type=USER_ROLE_CHANGE msg=audit(1192165790.198:882): user pid=12475 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192165790.214:883): user pid=12475 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=kasal exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1192165790.215:884): user pid=12475 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=10464: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1192165794.404:885): avc:  denied  { getsched } for  pid=15675 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192165794.404:885): arch=c000003e syscall=143 success=yes exit=0 a0=3d3b a1=2aaaaaad6b38 a2=7fff2ee5a910 a3=782f73747865746e items=0 ppid=15674 pid=15675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192165794.548:886): avc:  denied  { write } for  pid=15675 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192165794.548:886): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=15674 pid=15675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192166102.000:887): user pid=15841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192166102.002:888): avc:  denied  { search } for  pid=15841 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192166102.002:888): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=15841 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192167001.158:889): user pid=15888 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192167901.923:890): user pid=15947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192168801.822:891): user pid=16023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192168861.679:892): user pid=16029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192169701.724:893): user pid=16096 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192170601.304:894): user pid=16126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192171501.224:895): user pid=16211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192172401.736:896): user pid=16258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192172461.867:897): user pid=16264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192173001.909:898): user pid=16287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192173301.613:899): user pid=16304 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192174201.294:900): user pid=16372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192174201.296:901): avc:  denied  { search } for  pid=16372 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192174201.296:901): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=16372 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192175101.093:902): user pid=16403 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1192175226.741:903): user pid=2109 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=tiskatko uri=file:/dev/null banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192176001.551:904): user pid=16435 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192176061.909:905): user pid=16441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192176901.951:906): user pid=16476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192177801.668:907): user pid=16600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1192177868.630:908): user pid=12475 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=kasal exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192177868.631:909): user pid=12475 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1192177880.548:910): user pid=12475 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192177880.557:911): user pid=12475 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1192177880.558:912): user pid=12475 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1192177880.566:913): login pid=12475 uid=0 old auid=10464 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1192177880.599:914): user pid=12475 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192177880.615:915): user pid=12475 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1192177880.616:916): user pid=12475 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1192177884.302:917): avc:  denied  { getsched } for  pid=16825 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192177884.302:917): arch=c000003e syscall=143 success=yes exit=0 a0=41b9 a1=2aaaaaad6b38 a2=7fffc92c7140 a3=782f73747865746e items=0 ppid=16824 pid=16825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192177884.313:918): avc:  denied  { write } for  pid=16825 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192177884.313:918): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=16824 pid=16825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192178701.370:919): user pid=17007 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192178701.372:920): avc:  denied  { search } for  pid=17007 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192178701.372:920): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=17007 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192179186.431:921): user pid=17029 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192179186.438:922): user pid=17029 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192179186.439:923): user pid=17029 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192179186.443:924): user pid=17029 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192179186.443:925): user pid=17029 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192179186.444:926): user pid=17029 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/sbin/ifup" (terminal=pts/0 res=success)'
>type=AVC msg=audit(1192179212.567:927): avc:  denied  { getsched } for  pid=17185 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192179212.567:927): arch=c000003e syscall=143 success=yes exit=0 a0=4321 a1=2aaaaaad6b38 a2=7fff05a44500 a3=782f73747865746e items=0 ppid=17184 pid=17185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192179212.574:928): avc:  denied  { write } for  pid=17185 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192179212.574:928): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=17184 pid=17185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=CRED_ACQ msg=audit(1192179217.528:929): user pid=17186 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192179217.537:930): user pid=17186 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192179217.537:931): user pid=17186 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192179217.539:932): user pid=17186 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=AVC msg=audit(1192179251.193:933): avc:  denied  { read } for  pid=17423 comm="setroubleshootd" name=".rpmmacros" dev=dm-0 ino=3688447 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1192179251.193:933): arch=c000003e syscall=4 success=yes exit=0 a0=7fff8c904d70 a1=7fff8c905130 a2=7fff8c905130 a3=0 items=0 ppid=1 pid=17423 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1192179251.193:934): avc:  denied  { read } for  pid=17423 comm="setroubleshootd" name="rpmmacros" dev=dm-0 ino=3688485 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1192179251.193:934): arch=c000003e syscall=2 success=yes exit=12 a0=839cf0 a1=0 a2=1b6 a3=6d items=0 ppid=1 pid=17423 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_END msg=audit(1192179364.809:935): user pid=12475 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192179364.809:936): user pid=12475 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1192179374.169:937): user pid=17542 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192179374.178:938): user pid=17542 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1192179374.179:939): user pid=17542 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1192179374.181:940): login pid=17542 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1192179374.215:941): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192179374.230:942): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1192179374.231:943): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1192179376.475:944): avc:  denied  { getsched } for  pid=17742 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192179376.475:944): arch=c000003e syscall=143 success=yes exit=0 a0=454e a1=2aaaaaad6b38 a2=7fffc2123be0 a3=782f73747865746e items=0 ppid=17741 pid=17742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192179376.501:945): avc:  denied  { write } for  pid=17742 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192179376.501:945): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=17741 pid=17742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1192179427.011:946): user pid=17882 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192179427.019:947): user pid=17882 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192179427.020:948): user pid=17882 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192179427.022:949): user pid=17882 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192179427.023:950): user pid=17882 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192179427.024:951): user pid=17882 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/sbin/service" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192179454.859:952): user pid=17906 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192179454.861:953): user pid=17906 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192179454.862:954): user pid=17906 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192179454.862:955): user pid=17906 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/sbin/service" (terminal=pts/1 res=success)'
>type=AVC msg=audit(1192179499.239:956): avc:  denied  { getsched } for  pid=17951 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192179499.239:956): arch=c000003e syscall=143 success=yes exit=0 a0=461f a1=2aaaaaad6b38 a2=7fffd4010ac0 a3=782f73747865746e items=0 ppid=17950 pid=17951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192179499.246:957): avc:  denied  { write } for  pid=17951 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192179499.246:957): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=17950 pid=17951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192179601.363:958): user pid=17956 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192179601.366:959): avc:  denied  { search } for  pid=17956 comm="crond" name="news" dev=dm-1 ino=197461 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:news_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192179601.366:959): arch=c000003e syscall=80 success=yes exit=0 a0=6981e5 a1=698350 a2=0 a3=0 items=0 ppid=2363 pid=17956 auid=4294967295 uid=9 gid=13 euid=9 suid=9 fsuid=9 egid=13 sgid=13 fsgid=13 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192179661.602:960): user pid=17962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192180138.831:961): user pid=18002 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192180138.839:962): user pid=18002 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192180138.840:963): user pid=18002 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192180138.850:964): user pid=18002 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192180138.850:965): user pid=18002 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192180138.852:966): user pid=18002 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_AVC msg=audit(1192180215.765:967): user pid=2001 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1192180213.568:968): policy loaded auid=500
>type=SYSCALL msg=audit(1192180213.568:968): arch=c000003e syscall=1 success=yes exit=3815782 a0=4 a1=2aaaab878000 a2=3a3966 a3=0 items=0 ppid=18055 pid=18056 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=CRED_ACQ msg=audit(1192180354.719:969): user pid=18145 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192180354.728:970): user pid=18145 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192180354.729:971): user pid=18145 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192180354.730:972): user pid=18145 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192180471.318:973): user pid=18205 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192180471.324:974): user pid=18205 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192180471.324:975): user pid=18205 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192180471.326:976): user pid=18205 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192180479.545:977): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192180479.545:978): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1192180485.975:979): avc:  denied  { getattr } for  pid=17542 comm="gdm-binary" path="/boot" dev=sda1 ino=2 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:boot_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192180485.975:979): arch=c000003e syscall=4 success=yes exit=0 a0=6d128a a1=7fff050949e0 a2=7fff050949e0 a3=0 items=0 ppid=2641 pid=17542 auid=500 uid=0 gid=0 euid=500 suid=500 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="gdm-binary" exe="/usr/sbin/gdm-binary" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192180499.663:980): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192180499.675:981): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1192180499.676:982): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1192180499.684:983): login pid=17542 uid=0 old auid=500 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1192180499.719:984): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192180499.734:985): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1192180499.735:986): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192180501.652:987): user pid=18414 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192180502.894:988): avc:  denied  { getsched } for  pid=18463 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192180502.894:988): arch=c000003e syscall=143 success=yes exit=0 a0=481f a1=2aaaaaad6b38 a2=7fffd25d1080 a3=782f73747865746e items=0 ppid=18462 pid=18463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192180502.912:989): avc:  denied  { write } for  pid=18463 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192180502.912:989): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=18462 pid=18463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_AVC msg=audit(1192180502.924:990): user pid=2001 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.167 spid=18463 tpid=18440 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=CRED_ACQ msg=audit(1192180542.485:991): user pid=18601 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192180542.496:992): user pid=18601 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192180542.496:993): user pid=18601 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192180542.497:994): user pid=18601 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192180601.377:995): user pid=18685 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192180601.386:996): user pid=18685 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192180601.386:997): user pid=18685 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192180601.388:998): user pid=18685 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=AVC msg=audit(1192180693.136:999): avc:  denied  { getsched } for  pid=19216 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192180693.136:999): arch=c000003e syscall=143 success=yes exit=0 a0=4b10 a1=2aaaaaad6b38 a2=7fff0085c310 a3=782f73747865746e items=0 ppid=19215 pid=19216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192180693.143:1000): avc:  denied  { write } for  pid=19216 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192180693.143:1000): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=19215 pid=19216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192180743.061:1001): avc:  denied  { read } for  pid=19216 comm="packagekitd" name="job_count.dat" dev=dm-1 ino=1671435 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192180743.061:1001): arch=c000003e syscall=2 success=yes exit=18 a0=4185b8 a1=0 a2=0 a3=61642e746e756f63 items=0 ppid=1 pid=19216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192180743.062:1002): avc:  denied  { getattr } for  pid=19216 comm="packagekitd" path="/var/run/PackageKit/job_count.dat" dev=dm-1 ino=1671435 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192180743.062:1002): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff0085abe0 a2=7fff0085abe0 a3=61642e746e756f63 items=0 ppid=1 pid=19216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192180743.108:1003): avc:  denied  { unlink } for  pid=19216 comm="packagekitd" name="job_count.dat" dev=dm-1 ino=1671435 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192180743.108:1003): arch=c000003e syscall=82 success=yes exit=0 a0=642fa0 a1=4185b8 a2=51 a3=61642e746e756f63 items=0 ppid=1 pid=19216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1192180743.161:1004): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=19216 comm="packagekitd" sig=11
>type=CRED_ACQ msg=audit(1192180770.154:1005): user pid=19234 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192180770.157:1006): user pid=19234 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192180770.157:1007): user pid=19234 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192180770.159:1008): user pid=19234 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192180912.850:1009): user pid=19241 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192180912.853:1010): user pid=19241 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192180912.853:1011): user pid=19241 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192180912.854:1012): user pid=19241 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1192180944.668:1013): user pid=19250 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192180944.669:1014): user pid=19250 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192180944.708:1015): user pid=19250 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1192180945.773:1016): avc:  denied  { read write } for  pid=18259 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=5505043 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192180945.773:1016): arch=c000003e syscall=30 success=yes exit=-823095296 a0=540013 a1=0 a2=0 a3=3591b509f0 items=0 ppid=17542 pid=18259 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192181401.503:1017): user pid=19454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192182301.111:1018): user pid=19852 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192183201.436:1019): user pid=20278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192183261.897:1020): user pid=20326 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192183357.318:1021): avc:  denied  { write } for  pid=20531 comm="load_policy" path="pipe:[786180]" dev=pipefs ino=786180 scontext=system_u:system_r:load_policy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1192183357.318:1021): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaaccc2a0 a1=2aaaadf0b650 a2=0 a3=0 items=0 ppid=20528 pid=20531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1192183359.767:1022): user pid=2001 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1192183357.532:1023): policy loaded auid=500
>type=SYSCALL msg=audit(1192183357.532:1023): arch=c000003e syscall=1 success=yes exit=3851453 a0=4 a1=2aaaab878000 a2=3ac4bd a3=0 items=0 ppid=20528 pid=20531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1192183678.016:1024): user pid=2001 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1192183688.171:1025): avc:  denied  { write } for  pid=23580 comm="load_policy" path="pipe:[786180]" dev=pipefs ino=786180 scontext=system_u:system_r:load_policy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1192183688.171:1025): arch=c000003e syscall=59 success=yes exit=0 a0=7c40f0 a1=2bfce20 a2=0 a3=2aaaaaad1210 items=0 ppid=23577 pid=23580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1192183690.631:1026): user pid=2001 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1192183688.365:1027): policy loaded auid=500
>type=SYSCALL msg=audit(1192183688.365:1027): arch=c000003e syscall=1 success=yes exit=3851453 a0=4 a1=2aaaab878000 a2=3ac4bd a3=0 items=0 ppid=23577 pid=23580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1192183691.267:1028): user pid=23577 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=system_u new-role=? new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ROLE_CHANGE msg=audit(1192183691.541:1029): user pid=23583 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1192183691.795:1030): user pid=23584 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="guest_u" old-seuser=? old-role=? old-range=? new-seuser=guest_u new-role=guest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1192183692.022:1031): user pid=23585 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="xguest_u" old-seuser=? old-role=? old-range=? new-seuser=xguest_u new-role=xguest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AVC msg=audit(1192183700.129:1032): user pid=2001 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1192183708.472:1033): avc:  denied  { write } for  pid=23594 comm="load_policy" path="pipe:[786180]" dev=pipefs ino=786180 scontext=system_u:system_r:load_policy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1192183708.472:1033): arch=c000003e syscall=59 success=yes exit=0 a0=7c40f0 a1=2bfce20 a2=0 a3=2aaaaaad1210 items=0 ppid=23593 pid=23594 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1192183710.915:1034): user pid=2001 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=7) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1192183708.643:1035): policy loaded auid=500
>type=SYSCALL msg=audit(1192183708.643:1035): arch=c000003e syscall=1 success=yes exit=3851453 a0=4 a1=2aaaab878000 a2=3ac4bd a3=0 items=0 ppid=23593 pid=23594 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1192183711.519:1036): user pid=23593 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=system_u new-role=? new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ROLE_CHANGE msg=audit(1192183711.763:1037): user pid=23596 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1192183711.995:1038): user pid=23597 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="guest_u" old-seuser=? old-role=? old-range=? new-seuser=guest_u new-role=guest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1192183712.220:1039): user pid=23598 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="xguest_u" old-seuser=? old-role=? old-range=? new-seuser=xguest_u new-role=xguest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1192184101.818:1040): user pid=23736 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192184293.426:1041): avc:  denied  { getsched } for  pid=23766 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192184293.426:1041): arch=c000003e syscall=143 success=yes exit=0 a0=5cd6 a1=2aaaaaef7068 a2=7fff27227ce0 a3=0 items=0 ppid=23765 pid=23766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192184293.465:1042): avc:  denied  { write } for  pid=23766 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192184293.465:1042): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=0 items=0 ppid=23765 pid=23766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192184293.507:1043): avc:  denied  { read } for  pid=23766 comm="packagekitd" name="job_count.dat" dev=dm-1 ino=1671452 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192184293.507:1043): arch=c000003e syscall=2 success=yes exit=9 a0=4185b8 a1=0 a2=0 a3=61642e746e756f63 items=0 ppid=1 pid=23766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192184293.507:1044): avc:  denied  { getattr } for  pid=23766 comm="packagekitd" path="/var/run/PackageKit/job_count.dat" dev=dm-1 ino=1671452 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192184293.507:1044): arch=c000003e syscall=5 success=yes exit=0 a0=9 a1=7fff272265b0 a2=7fff272265b0 a3=61642e746e756f63 items=0 ppid=1 pid=23766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192184293.543:1045): avc:  denied  { unlink } for  pid=23766 comm="packagekitd" name="job_count.dat" dev=dm-1 ino=1671452 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192184293.543:1045): arch=c000003e syscall=82 success=yes exit=0 a0=631c60 a1=4185b8 a2=41 a3=0 items=0 ppid=1 pid=23766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_AVC msg=audit(1192184293.543:1046): user pid=2001 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.175 spid=23766 tpid=19213 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=ANOM_ABEND msg=audit(1192184293.629:1047): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=23766 comm="packagekitd" sig=11
>type=AVC msg=audit(1192184293.650:1048): avc:  denied  { getsched } for  pid=23769 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192184293.650:1048): arch=c000003e syscall=143 success=yes exit=0 a0=5cd9 a1=2aaaaaef7068 a2=7fffae3a5e60 a3=0 items=0 ppid=23768 pid=23769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192185001.635:1049): user pid=24013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192185001.934:1050): user pid=24011 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192185001.942:1051): user pid=24011 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192185002.049:1052): user pid=24011 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192185002.053:1053): user pid=24011 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192185002.054:1054): user pid=24011 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192185002.055:1055): user pid=24011 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/2 res=success)'
>type=AVC msg=audit(1192185031.324:1056): avc:  denied  { signal } for  pid=17542 comm="gdm-binary" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=process
>type=SYSCALL msg=audit(1192185031.324:1056): arch=c000003e syscall=62 success=yes exit=0 a0=ffffb88c a1=f a2=0 a3=8 items=0 ppid=2641 pid=17542 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=0 sgid=500 fsgid=0 tty=(none) comm="gdm-binary" exe="/usr/sbin/gdm-binary" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1192185032.497:1057): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192185032.498:1058): user pid=17542 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1192185043.691:1059): avc:  denied  { unlink } for  pid=2077 comm="hcid" name="bluetoothd_address" dev=dm-1 ino=196818 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192185043.691:1059): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaaadd6f5 a1=2aaaaad15e50 a2=51 a3=4000 items=0 ppid=1 pid=2077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hcid" exe="/usr/sbin/hcid" subj=system_u:system_r:bluetooth_t:s0 key=(null)
>type=DAEMON_END msg=audit(1192185050.820:3315): auditd normal halt, sending auid=4294967295 pid=24463 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1813
>type=DAEMON_START msg=audit(1192185147.142:3182): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1808 res=success, auditd pid=1808
>type=CONFIG_CHANGE msg=audit(1192185147.246:7): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1192185147.249:8): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1192185147.342:9): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1192185147.342:10): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1192185161.741:11): avc:  denied  { name_bind } for  pid=2121 comm="xinetd" src=119 scontext=system_u:system_r:inetd_t:s0 tcontext=system_u:object_r:innd_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1192185161.741:11): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fff813cf930 a2=1c a3=0 items=0 ppid=1 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xinetd" exe="/usr/sbin/xinetd" subj=system_u:system_r:inetd_t:s0 key=(null)
>type=AVC msg=audit(1192185212.518:12): avc:  denied  { getattr } for  pid=2690 comm="gdm-binary" path="/boot" dev=sda1 ino=2 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:boot_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192185212.518:12): arch=c000003e syscall=4 success=yes exit=0 a0=69e58a a1=7fffe27f7820 a2=7fffe27f7820 a3=0 items=0 ppid=2621 pid=2690 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="gdm-binary" exe="/usr/sbin/gdm-binary" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192185220.201:13): user pid=2615 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1192185220.241:14): user pid=2615 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1192185220.248:15): login pid=2615 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1192185220.331:16): user pid=2615 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1192185220.342:17): user pid=2615 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1192185220.343:18): user pid=2615 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1192185220.344:19): user pid=2615 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1192185301.193:20): user pid=2615 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1192185301.195:21): user pid=2615 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1192185327.835:3183): auditd normal halt, sending auid=4294967295 pid=3260 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1808
>type=DAEMON_START msg=audit(1192186031.431:5318): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1823 res=success, auditd pid=1823
>type=CONFIG_CHANGE msg=audit(1192186031.535:8): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1192186031.538:9): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1192186031.642:10): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1192186031.644:11): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1192186043.352:12): avc:  denied  { name_bind } for  pid=2136 comm="xinetd" src=119 scontext=system_u:system_r:inetd_t:s0 tcontext=system_u:object_r:innd_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1192186043.352:12): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fff0acb8370 a2=1c a3=0 items=0 ppid=1 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xinetd" exe="/usr/sbin/xinetd" subj=system_u:system_r:inetd_t:s0 key=(null)
>type=AVC msg=audit(1192186089.729:13): avc:  denied  { getattr } for  pid=2705 comm="gdm-binary" path="/boot" dev=sda1 ino=2 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:boot_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192186089.729:13): arch=c000003e syscall=4 success=yes exit=0 a0=69e58a a1=7fffcf6fe8e0 a2=7fffcf6fe8e0 a3=0 items=0 ppid=2642 pid=2705 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="gdm-binary" exe="/usr/sbin/gdm-binary" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192186204.438:14): user pid=2705 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192186204.492:15): user pid=2705 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1192186204.494:16): user pid=2705 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1192186204.498:17): login pid=2705 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1192186204.540:18): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192186204.603:19): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1192186204.604:20): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1192186214.748:21): avc:  denied  { getsched } for  pid=2949 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192186214.748:21): arch=c000003e syscall=143 success=yes exit=0 a0=b85 a1=2aaaaaef7068 a2=7fff0ccf27b0 a3=0 items=0 ppid=2948 pid=2949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192186214.866:22): avc:  denied  { write } for  pid=2949 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192186214.866:22): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=0 items=0 ppid=2948 pid=2949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_AVC msg=audit(1192186214.883:23): user pid=2006 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.15 spid=2949 tpid=2919 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AUTH msg=audit(1192186250.479:24): user pid=3109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192186250.488:25): user pid=3109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192186250.521:26): user pid=3109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192186250.533:27): user pid=3109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192186250.534:28): user pid=3109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192186250.543:29): user pid=3109 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=ANOM_ABEND msg=audit(1192186476.010:30): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3835 comm="telepathy-idle" sig=6
>type=USER_ACCT msg=audit(1192186801.184:31): user pid=3863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192186861.101:32): user pid=3869 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192187701.990:33): user pid=3900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192188601.670:34): user pid=3937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192189501.152:35): user pid=4041 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192190401.330:36): user pid=4158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192190461.605:37): user pid=4175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192191301.649:38): user pid=4253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192191914.598:39): user pid=4367 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192191914.626:40): user pid=4367 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192191914.629:41): login pid=4367 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192191914.629:42): user pid=4367 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192191914.632:43): user pid=4370 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192191914.670:44): user pid=4367 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1192192201.095:45): user pid=4432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192192268.067:46): user pid=4446 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192192268.074:47): user pid=4446 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192192268.075:48): user pid=4446 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192192268.077:49): user pid=4446 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192192268.077:50): user pid=4446 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192192268.079:51): user pid=4446 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1192192297.625:52): user pid=4367 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192192297.626:53): user pid=4367 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192192310.920:54): user pid=4463 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192192310.945:55): user pid=4463 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192192310.948:56): login pid=4463 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192192310.948:57): user pid=4463 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192192310.951:58): user pid=4466 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192192314.652:59): user pid=4463 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192192314.653:60): user pid=4463 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192192336.540:61): user pid=4501 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192192336.555:62): user pid=4501 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192192336.558:63): login pid=4501 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192192336.559:64): user pid=4501 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192192336.561:65): user pid=4504 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192192337.558:66): user pid=4501 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192192337.559:67): user pid=4501 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192193101.199:68): user pid=4563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194001.357:69): user pid=4691 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194001.360:70): user pid=4692 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194061.101:71): user pid=4706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194061.103:72): user pid=4705 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194121.184:73): user pid=4718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194181.262:74): user pid=4725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194241.341:75): user pid=4731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194301.423:76): user pid=4738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194361.591:77): user pid=4745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194421.668:78): user pid=4751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194481.767:79): user pid=4758 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194541.845:80): user pid=4764 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194601.925:81): user pid=4771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194662.002:82): user pid=4778 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194721.080:83): user pid=4787 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194781.157:84): user pid=4794 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194841.235:85): user pid=4800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194901.313:86): user pid=4807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194901.314:87): user pid=4808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192194961.900:88): user pid=4818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195021.978:89): user pid=4824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195081.756:90): user pid=4831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195141.834:91): user pid=4840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195201.913:92): user pid=4847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195261.990:93): user pid=4861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195321.066:94): user pid=4869 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195381.143:95): user pid=4876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195441.220:96): user pid=4885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195501.296:97): user pid=4892 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195561.373:98): user pid=4902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195621.456:99): user pid=4908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195681.532:100): user pid=4918 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195741.613:101): user pid=4924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195801.693:102): user pid=4931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195801.693:103): user pid=4932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195861.872:104): user pid=4942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195921.997:105): user pid=4950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192195981.077:106): user pid=4957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196041.158:107): user pid=4963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196101.249:108): user pid=4970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196161.327:109): user pid=4977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196221.407:110): user pid=4983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196281.505:111): user pid=4990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196341.584:112): user pid=4996 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196401.213:113): user pid=5008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196461.321:114): user pid=5055 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196521.398:115): user pid=5062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196581.476:116): user pid=5070 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196641.703:117): user pid=5077 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196701.781:118): user pid=5084 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196701.782:119): user pid=5085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196761.879:120): user pid=5095 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196821.957:121): user pid=5101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196881.034:122): user pid=5110 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192196941.113:123): user pid=5116 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192197001.204:124): user pid=5123 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192197061.282:125): user pid=5135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192197121.357:126): user pid=5141 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192197181.435:127): user pid=5148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192197241.514:128): user pid=5154 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192197301.595:129): user pid=5161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192197361.673:130): user pid=5168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192197421.761:131): user pid=5175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192197481.842:132): user pid=5182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192197541.926:133): user pid=5189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192197601.365:134): user pid=5204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192197661.638:135): user pid=5210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192198501.681:136): user pid=5329 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192199401.912:137): user pid=5473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192200301.317:138): user pid=5503 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192201201.414:139): user pid=5543 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192201261.384:140): user pid=5549 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192202101.429:141): user pid=5579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192203001.555:142): user pid=5616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192203901.484:143): user pid=5646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192204802.007:144): user pid=5689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192204861.568:145): user pid=5695 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192205701.612:146): user pid=5726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192206601.542:147): user pid=5762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192207502.002:148): user pid=5794 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1192208147.507:149): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192208147.507:150): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192208163.793:151): user pid=5880 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192208163.822:152): user pid=5880 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192208163.825:153): login pid=5880 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192208163.826:154): user pid=5880 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192208163.828:155): user pid=5883 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192208163.834:156): user pid=5880 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=/dev/pts/0 res=success)'
>type=USER_AUTH msg=audit(1192208169.139:157): user pid=5926 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1192208171.398:158): user pid=5926 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192208171.407:159): user pid=5926 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192208171.408:160): user pid=5926 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192208171.418:161): user pid=5926 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192208171.418:162): user pid=5926 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192208171.420:163): user pid=5926 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1192208363.495:164): user pid=5880 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192208363.496:165): user pid=5880 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192208401.594:166): user pid=6185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192208461.830:167): user pid=6191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192208497.575:168): user pid=6197 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192208497.675:169): user pid=6197 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192208497.678:170): login pid=6197 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192208497.679:171): user pid=6197 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192208497.684:172): user pid=6200 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192208510.790:173): user pid=6197 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192208510.791:174): user pid=6197 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192208511.159:175): user pid=6228 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192208511.188:176): user pid=6228 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192208511.191:177): login pid=6228 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192208511.191:178): user pid=6228 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192208511.196:179): user pid=6231 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_AUTH msg=audit(1192208637.325:180): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=kasal exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192208637.337:181): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=kasal exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1192208637.338:182): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1192208637.373:183): login pid=2705 uid=0 old auid=500 new auid=10464
>type=USER_ROLE_CHANGE msg=audit(1192208637.410:184): user pid=2705 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192208637.429:185): user pid=2705 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=kasal exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1192208637.430:186): user pid=2705 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=10464: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1192208640.924:187): avc:  denied  { getsched } for  pid=6432 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192208640.924:187): arch=c000003e syscall=143 success=yes exit=0 a0=1920 a1=2aaaaaef7068 a2=7fff7b4aef60 a3=0 items=0 ppid=6431 pid=6432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192208640.938:188): avc:  denied  { write } for  pid=6432 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192208640.938:188): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=0 items=0 ppid=6431 pid=6432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1192208647.663:189): auid=10464 uid=10464 gid=10464 subj=system_u:system_r:unconfined_t:s0 pid=6433 comm="escd" sig=11
>type=CRED_DISP msg=audit(1192208655.327:190): user pid=6228 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192208655.328:191): user pid=6228 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192208656.472:192): user pid=6530 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192208656.509:193): user pid=6530 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192208656.512:194): login pid=6530 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192208656.513:195): user pid=6530 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192208656.517:196): user pid=6533 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192208656.724:197): user pid=6530 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192208656.725:198): user pid=6530 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192208657.095:199): user pid=6560 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192208657.121:200): user pid=6560 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192208657.124:201): login pid=6560 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1192208657.124:202): user pid=6560 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192208657.129:203): user pid=6563 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192208657.256:204): user pid=6560 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_END msg=audit(1192208657.257:205): user pid=6560 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=10.0.0.11, addr=10.0.0.11, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192209301.876:206): user pid=6644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192210201.566:207): user pid=6696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192211101.357:208): user pid=6725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192212001.907:209): user pid=6757 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192212061.048:210): user pid=6763 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192212901.096:211): user pid=6791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192213801.268:212): user pid=6820 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192214701.565:213): user pid=6848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192214948.968:214): user pid=6861 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192214948.995:215): user pid=6861 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192214948.998:216): login pid=6861 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192214948.999:217): user pid=6861 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192214949.001:218): user pid=6864 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192214949.306:219): user pid=6861 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1192215601.030:220): user pid=6942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192215661.334:221): user pid=6948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192216130.158:222): user pid=6861 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192216130.159:223): user pid=6861 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192216501.380:224): user pid=6980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192217401.070:225): user pid=7009 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192218301.086:226): user pid=7037 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192219201.840:227): user pid=7068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192219261.193:228): user pid=7074 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192220101.237:229): user pid=7102 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192221001.020:230): user pid=7131 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192221901.997:231): user pid=7159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192222801.670:232): user pid=7190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192222861.667:233): user pid=7196 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192223701.711:234): user pid=7224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192224601.802:235): user pid=7253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192225501.389:236): user pid=7281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192226401.906:237): user pid=7312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192226461.229:238): user pid=7318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192227301.273:239): user pid=7346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192228202.007:240): user pid=7375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192229101.091:241): user pid=7403 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192230001.572:242): user pid=7434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192230061.580:243): user pid=7440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192230901.623:244): user pid=7468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192231801.577:245): user pid=7497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192232701.054:246): user pid=7525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192233601.348:247): user pid=7556 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192233661.963:248): user pid=7562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192234502.004:249): user pid=7590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192235401.529:250): user pid=7619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192236301.387:251): user pid=7647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192237201.225:252): user pid=7678 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192237261.320:253): user pid=7684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192237561.358:254): user pid=7698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192237571.668:255): avc:  denied  { use } for  pid=7754 comm="vpnc" path="pipe:[739758]" dev=pipefs ino=739758 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1192237571.668:255): avc:  denied  { read } for  pid=7754 comm="vpnc" path="pipe:[739758]" dev=pipefs ino=739758 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=AVC msg=audit(1192237571.668:255): avc:  denied  { write } for  pid=7754 comm="vpnc" path="pipe:[739759]" dev=pipefs ino=739759 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192237571.668:255): arch=c000003e syscall=59 success=yes exit=0 a0=6c7010 a1=6c78f0 a2=714370 a3=0 items=0 ppid=7729 pid=7754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192237571.671:256): avc:  denied  { ioctl } for  pid=7754 comm="vpnc" path="pipe:[739758]" dev=pipefs ino=739758 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192237571.671:256): arch=c000003e syscall=16 success=no exit=-22 a0=0 a1=5401 a2=7fffaec14510 a3=240 items=0 ppid=7729 pid=7754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192237571.672:257): avc:  denied  { getattr } for  pid=7754 comm="vpnc" path="pipe:[739758]" dev=pipefs ino=739758 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192237571.672:257): arch=c000003e syscall=5 success=yes exit=0 a0=0 a1=7fffaec14420 a2=7fffaec14420 a3=240 items=0 ppid=7729 pid=7754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192238101.634:258): user pid=7792 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192239001.568:259): user pid=7821 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192239901.990:260): user pid=7849 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192240801.016:261): user pid=7880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192240861.066:262): user pid=7886 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192240921.107:263): user pid=7893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192241701.113:264): user pid=7924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192242601.057:265): user pid=7953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192243501.050:266): user pid=7981 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192244401.075:267): user pid=4970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192244461.394:268): user pid=5960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1192244761.184:269): user pid=9604 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1192244761.185:270): user pid=9604 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1192244761.301:271): user pid=9604 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1192244761.301:272): user pid=9604 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192245301.013:273): user pid=9658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192246201.734:274): user pid=9687 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192247101.713:275): user pid=9715 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192248001.726:276): user pid=9746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192248061.039:277): user pid=9752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192248901.084:278): user pid=9780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192249801.544:279): user pid=9809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192250701.507:280): user pid=9837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192251601.492:281): user pid=9868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192251661.788:282): user pid=9874 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192252501.831:283): user pid=9902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192253401.080:284): user pid=9931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192254301.529:285): user pid=9960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192255201.508:286): user pid=9991 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192255261.114:287): user pid=9997 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192256101.157:288): user pid=10025 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192257001.370:289): user pid=10054 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192257901.230:290): user pid=10082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192258801.212:291): user pid=10113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192258861.230:292): user pid=10119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192259401.270:293): user pid=10139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192259701.176:294): user pid=10156 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192260601.158:295): user pid=10185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192261501.914:296): user pid=10213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192262401.916:297): user pid=10244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192262461.703:298): user pid=10250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192263301.752:299): user pid=10278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192264201.783:300): user pid=10307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192265101.810:301): user pid=10335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192266001.214:302): user pid=10366 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192266061.615:303): user pid=10372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192266901.660:304): user pid=10400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192267801.641:305): user pid=10429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192268701.216:306): user pid=10457 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192269601.120:307): user pid=10488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192269661.248:308): user pid=10494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192270501.292:309): user pid=10522 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192271401.578:310): user pid=10551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192272301.798:311): user pid=10579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192273201.121:312): user pid=10610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192273261.511:313): user pid=10616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192274101.553:314): user pid=10644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192275001.248:315): user pid=10673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192275901.591:316): user pid=10701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192276801.173:317): user pid=10732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192276861.611:318): user pid=10738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192277701.654:319): user pid=10766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192278601.668:320): user pid=10795 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192279100.192:321): user pid=10867 uid=0 auid=10464 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192279100.201:322): user pid=10867 uid=0 auid=10464 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1192279108.127:323): user pid=10871 uid=10464 auid=10464 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192279108.133:324): user pid=10871 uid=10464 auid=10464 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192279108.198:325): user pid=10871 uid=10464 auid=10464 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192279108.199:326): user pid=10871 uid=10464 auid=10464 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1192279132.204:327): user pid=10871 uid=10464 auid=10464 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192279132.205:328): user pid=10871 uid=10464 auid=10464 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192279502.002:329): user pid=10929 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192280401.447:330): user pid=10965 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192280461.749:331): user pid=10971 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192281301.792:332): user pid=11002 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192282201.201:333): user pid=11032 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192283101.729:334): user pid=11075 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192283184.690:335): user pid=11080 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192283184.821:336): user pid=11080 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192283184.824:337): login pid=11080 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192283184.824:338): user pid=11080 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192283184.827:339): user pid=11084 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192283191.510:340): user pid=11080 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1192283386.995:341): user pid=11134 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192283387.015:342): user pid=11134 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192283387.018:343): login pid=11134 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192283387.018:344): user pid=11134 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192283387.022:345): user pid=11150 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192283395.335:346): user pid=11134 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/2 res=success)'
>type=USER_ACCT msg=audit(1192284001.737:347): user pid=11299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192284061.769:348): user pid=11306 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192284901.076:349): user pid=11348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192285801.356:350): user pid=11381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192286701.379:351): user pid=11413 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192287140.170:352): user pid=11453 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192287140.197:353): user pid=11453 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192287140.200:354): login pid=11453 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192287140.200:355): user pid=11453 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192287140.203:356): user pid=11456 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192287173.852:357): user pid=11453 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192287173.852:358): user pid=11453 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192287601.451:359): user pid=11542 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192287661.627:360): user pid=11548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192288501.673:361): user pid=11657 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192289401.324:362): user pid=11738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192290301.441:363): user pid=11769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192291073.183:364): user pid=11080 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192291073.183:365): user pid=11080 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192291201.625:366): user pid=11801 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192291261.949:367): user pid=11807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192291279.441:368): user pid=11134 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192291279.442:369): user pid=11134 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192292101.993:370): user pid=11836 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192293001.508:371): user pid=11865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192293901.884:372): user pid=11902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192294801.374:373): user pid=11933 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192294861.498:374): user pid=11943 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192295701.538:375): user pid=11972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192296601.252:376): user pid=12001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192297501.562:377): user pid=12029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192298401.267:378): user pid=12060 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192298461.268:379): user pid=12066 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192299301.966:380): user pid=12094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192300201.573:381): user pid=12123 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192301101.740:382): user pid=12151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192302001.108:383): user pid=12182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192302061.708:384): user pid=12188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192302901.750:385): user pid=12216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192303801.813:386): user pid=12245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192304115.378:387): user pid=12257 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192304115.405:388): user pid=12257 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192304115.407:389): login pid=12257 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192304115.408:390): user pid=12257 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192304115.411:391): user pid=12260 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192304115.480:392): user pid=12257 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/1 res=success)'
>type=USER_AUTH msg=audit(1192304216.060:393): user pid=12308 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192304216.069:394): user pid=12308 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192304216.071:395): user pid=12308 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192304216.080:396): user pid=12308 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192304216.080:397): user pid=12308 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192304216.082:398): user pid=12308 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192304264.861:399): user pid=12350 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192304264.863:400): user pid=12350 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192304264.863:401): user pid=12350 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192304264.864:402): user pid=12350 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192304271.259:403): user pid=12351 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192304271.261:404): user pid=12351 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192304271.261:405): user pid=12351 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192304271.262:406): user pid=12351 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192304347.659:407): user pid=12354 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192304347.683:408): user pid=12354 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192304347.685:409): login pid=12354 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192304347.686:410): user pid=12354 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192304347.689:411): user pid=12357 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192304347.801:412): user pid=12354 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/2 res=success)'
>type=CRED_DISP msg=audit(1192304611.033:413): user pid=12257 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192304611.034:414): user pid=12257 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192304701.932:415): user pid=12441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192305601.736:416): user pid=12472 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192305661.277:417): user pid=12478 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192306214.967:418): user pid=12502 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192306214.993:419): user pid=12502 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192306214.997:420): login pid=12502 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192306214.997:421): user pid=12502 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192306215.000:422): user pid=12505 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192306215.073:423): user pid=12502 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/1 res=success)'
>type=USER_AUTH msg=audit(1192306221.904:424): user pid=12549 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192306221.912:425): user pid=12549 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192306221.913:426): user pid=12549 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192306221.917:427): user pid=12549 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192306221.917:428): user pid=12549 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192306221.919:429): user pid=12549 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1192306304.541:430): user pid=12502 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192306304.542:431): user pid=12502 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_AUTH msg=audit(1192306349.350:432): user pid=12595 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_AUTH msg=audit(1192306351.941:433): user pid=12595 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192306351.949:434): user pid=12595 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192306351.950:435): user pid=12595 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192306351.954:436): user pid=12595 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192306351.954:437): user pid=12595 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192306351.955:438): user pid=12595 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1192306419.545:439): user pid=12354 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192306419.547:440): user pid=12354 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192306501.327:441): user pid=12620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192307401.916:442): user pid=12649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192308301.974:443): user pid=12677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192309201.735:444): user pid=12708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192309261.377:445): user pid=12714 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192310101.424:446): user pid=12742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192311001.098:447): user pid=12771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192311901.811:448): user pid=12799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192312801.840:449): user pid=12830 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192312861.869:450): user pid=12836 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192313701.910:451): user pid=12864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192314601.936:452): user pid=12893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192315501.578:453): user pid=12921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192316401.087:454): user pid=12952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192316461.630:455): user pid=12958 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192317301.673:456): user pid=12986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192318201.960:457): user pid=13015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192319101.297:458): user pid=13043 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192320001.315:459): user pid=13074 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192320061.143:460): user pid=13080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192320901.185:461): user pid=13108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192321802.011:462): user pid=13137 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192322701.879:463): user pid=13165 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192323601.450:464): user pid=13196 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192323661.209:465): user pid=13202 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192323961.246:466): user pid=13216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192323971.621:467): avc:  denied  { use } for  pid=13272 comm="vpnc" path="pipe:[1821789]" dev=pipefs ino=1821789 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1192323971.621:467): avc:  denied  { read } for  pid=13272 comm="vpnc" path="pipe:[1821789]" dev=pipefs ino=1821789 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=AVC msg=audit(1192323971.621:467): avc:  denied  { write } for  pid=13272 comm="vpnc" path="pipe:[1821790]" dev=pipefs ino=1821790 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192323971.621:467): arch=c000003e syscall=59 success=yes exit=0 a0=8c9010 a1=8c98f0 a2=916370 a3=8 items=0 ppid=13247 pid=13272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192323971.765:468): avc:  denied  { ioctl } for  pid=13272 comm="vpnc" path="pipe:[1821789]" dev=pipefs ino=1821789 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192323971.765:468): arch=c000003e syscall=16 success=no exit=-22 a0=0 a1=5401 a2=7fff12c23d10 a3=240 items=0 ppid=13247 pid=13272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192323971.766:469): avc:  denied  { getattr } for  pid=13272 comm="vpnc" path="pipe:[1821789]" dev=pipefs ino=1821789 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192323971.766:469): arch=c000003e syscall=5 success=yes exit=0 a0=0 a1=7fff12c23c20 a2=7fff12c23c20 a3=240 items=0 ppid=13247 pid=13272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192324501.689:470): user pid=13310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192325401.645:471): user pid=13339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192326301.725:472): user pid=13367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192327201.219:473): user pid=13398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192327261.733:474): user pid=13404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192327321.772:475): user pid=13411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192328101.777:476): user pid=13442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192328521.120:477): user pid=13457 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192329001.124:478): user pid=13481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192329901.520:479): user pid=13509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1192330551.501:480): user pid=14203 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1192330551.502:481): user pid=14203 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1192330551.515:482): user pid=14203 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1192330551.515:483): user pid=14203 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192330801.984:484): user pid=14251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192330861.030:485): user pid=14257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192331701.073:486): user pid=29576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192332601.136:487): user pid=16419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192333501.227:488): user pid=16447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192334401.508:489): user pid=16478 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192334461.969:490): user pid=16484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192335301.012:491): user pid=16512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192336201.190:492): user pid=16541 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192337101.297:493): user pid=16569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192338001.304:494): user pid=16600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192338061.397:495): user pid=16606 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192338901.438:496): user pid=16634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192339801.895:497): user pid=16663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192340701.375:498): user pid=16692 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192341601.655:499): user pid=16723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192341661.752:500): user pid=16729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192342501.795:501): user pid=16757 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192343401.475:502): user pid=16786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192344301.876:503): user pid=16814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192345201.152:504): user pid=16845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192345261.213:505): user pid=16851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192345801.253:506): user pid=16871 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192346101.174:507): user pid=16888 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192347001.626:508): user pid=16917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192347901.651:509): user pid=16945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192348801.069:510): user pid=16976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192348861.423:511): user pid=16982 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192349701.467:512): user pid=17010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192350601.310:513): user pid=17039 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192351501.816:514): user pid=17067 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192352401.333:515): user pid=17098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192352461.281:516): user pid=17104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192353301.325:517): user pid=17132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192354201.687:518): user pid=17161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192355101.185:519): user pid=17189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192356001.232:520): user pid=17220 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192356061.014:521): user pid=17226 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192356901.054:522): user pid=17254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192357801.338:523): user pid=17283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192358701.833:524): user pid=17311 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192359601.498:525): user pid=17342 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192359661.184:526): user pid=17348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192360501.226:527): user pid=17376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192361401.243:528): user pid=17405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192362301.436:529): user pid=17433 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192363201.589:530): user pid=17464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192363261.814:531): user pid=17470 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192364101.856:532): user pid=17498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192365001.590:533): user pid=17527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192365901.029:534): user pid=17555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192366801.045:535): user pid=17586 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192366861.028:536): user pid=17592 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192367701.074:537): user pid=17620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192368601.370:538): user pid=17649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192368687.937:539): user pid=17655 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192368687.965:540): user pid=17655 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192368687.969:541): login pid=17655 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192368687.969:542): user pid=17655 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192368687.973:543): user pid=17658 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192368688.108:544): user pid=17655 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/1 res=success)'
>type=USER_AUTH msg=audit(1192368779.342:545): user pid=17719 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192368779.351:546): user pid=17719 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192368779.353:547): user pid=17719 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192368779.356:548): user pid=17719 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192368779.356:549): user pid=17719 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192368779.357:550): user pid=17719 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/sbin/fetchnews" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192369501.641:551): user pid=17754 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192370401.388:552): user pid=17785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192370461.040:553): user pid=17791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192371301.089:554): user pid=17819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192372201.912:555): user pid=17848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192373101.313:556): user pid=17876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192374001.506:557): user pid=17907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192374061.331:558): user pid=17913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192374901.372:559): user pid=17941 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192375801.488:560): user pid=17970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192376701.344:561): user pid=17998 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192376807.201:562): user pid=17655 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192376807.202:563): user pid=17655 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192377601.026:564): user pid=18029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192377661.229:565): user pid=18035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192378501.272:566): user pid=18063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192379401.186:567): user pid=18092 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192380301.884:568): user pid=18120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192381201.067:569): user pid=18151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192381261.339:570): user pid=18157 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192382101.383:571): user pid=18185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192383001.234:572): user pid=18214 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192383901.070:573): user pid=18242 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192384801.999:574): user pid=18273 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192384861.529:575): user pid=18279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192385701.571:576): user pid=18307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192386601.129:577): user pid=18336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192387501.421:578): user pid=18364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192388401.060:579): user pid=18395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192388461.923:580): user pid=18401 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192389301.964:581): user pid=18429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192390201.531:582): user pid=18458 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192391101.728:583): user pid=18486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192392001.106:584): user pid=18517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192392061.485:585): user pid=18523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192392901.527:586): user pid=18551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192393801.784:587): user pid=18580 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192394701.606:588): user pid=18608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192395601.256:589): user pid=18639 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192395661.490:590): user pid=18645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192396501.532:591): user pid=18673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192397401.841:592): user pid=18702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192398301.414:593): user pid=18730 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192398685.548:594): user pid=18746 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192398685.574:595): user pid=18746 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192398685.577:596): login pid=18746 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192398685.578:597): user pid=18746 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192398685.581:598): user pid=18749 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192398691.296:599): user pid=18746 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1192399201.991:600): user pid=18819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192399261.666:601): user pid=18825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192399625.921:602): user pid=18861 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192399625.921:603): user pid=18861 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192399625.993:604): user pid=18861 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1192399979.586:605): user pid=18746 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192399979.587:606): user pid=18746 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192400101.713:607): user pid=18882 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192401001.181:608): user pid=18911 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192401901.866:609): user pid=18939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192402801.536:610): user pid=18970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192402861.100:611): user pid=18976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192403701.144:612): user pid=19004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192404601.979:613): user pid=19033 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192405501.392:614): user pid=19061 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192406401.238:615): user pid=19092 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192406461.181:616): user pid=19098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192407301.222:617): user pid=19126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192407418.092:618): user pid=19133 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192407418.100:619): user pid=19133 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192407418.127:620): user pid=19133 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192407418.130:621): login pid=19133 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192407418.131:622): user pid=19133 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192407418.134:623): user pid=19137 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192407418.182:624): user pid=19133 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/1 res=success)'
>type=USER_AUTH msg=audit(1192407447.099:625): user pid=19194 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192407447.108:626): user pid=19194 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192407447.110:627): user pid=19194 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192407447.117:628): user pid=19194 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192407447.117:629): user pid=19194 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192407447.119:630): user pid=19194 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1192408071.384:631): user pid=19133 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192408071.385:632): user pid=19133 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192408202.004:633): user pid=19303 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192409101.532:634): user pid=19331 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192410001.346:635): user pid=19362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192410061.951:636): user pid=19368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192410361.994:637): user pid=19382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192410372.240:638): avc:  denied  { use } for  pid=19438 comm="vpnc" path="pipe:[2905272]" dev=pipefs ino=2905272 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fd
>type=AVC msg=audit(1192410372.240:638): avc:  denied  { read } for  pid=19438 comm="vpnc" path="pipe:[2905272]" dev=pipefs ino=2905272 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=AVC msg=audit(1192410372.240:638): avc:  denied  { write } for  pid=19438 comm="vpnc" path="pipe:[2905273]" dev=pipefs ino=2905273 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192410372.240:638): arch=c000003e syscall=59 success=yes exit=0 a0=8c9010 a1=8c98f0 a2=916370 a3=8 items=0 ppid=19413 pid=19438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192410372.354:639): avc:  denied  { ioctl } for  pid=19438 comm="vpnc" path="pipe:[2905272]" dev=pipefs ino=2905272 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192410372.354:639): arch=c000003e syscall=16 success=no exit=-22 a0=0 a1=5401 a2=7fff396cbae0 a3=240 items=0 ppid=19413 pid=19438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1192410372.355:640): avc:  denied  { getattr } for  pid=19438 comm="vpnc" path="pipe:[2905272]" dev=pipefs ino=2905272 scontext=system_u:system_r:vpnc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
>type=SYSCALL msg=audit(1192410372.355:640): arch=c000003e syscall=5 success=yes exit=0 a0=0 a1=7fff396cb9f0 a2=7fff396cb9f0 a3=240 items=0 ppid=19413 pid=19438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vpnc" exe="/usr/sbin/vpnc" subj=system_u:system_r:vpnc_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192410901.272:641): user pid=19476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192411801.628:642): user pid=19505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192412701.505:643): user pid=19533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192413601.169:644): user pid=19564 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192413661.883:645): user pid=19570 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192413721.926:646): user pid=19577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192414501.932:647): user pid=19608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192415401.682:648): user pid=19637 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192416301.515:649): user pid=19665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1192416909.159:650): user pid=21157 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1192416909.160:651): user pid=21157 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1192416909.203:652): user pid=21157 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1192416909.204:653): user pid=21157 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192417202.008:654): user pid=21206 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192417261.250:655): user pid=21212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192418101.294:656): user pid=21240 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192419001.044:657): user pid=21269 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192419901.763:658): user pid=21297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192420801.335:659): user pid=21328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192420861.722:660): user pid=21334 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192421701.766:661): user pid=21362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192422601.386:662): user pid=21391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192423501.585:663): user pid=21419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192424401.251:664): user pid=21450 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192424461.492:665): user pid=21456 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192425301.533:666): user pid=21484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192426201.984:667): user pid=21513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192427101.363:668): user pid=21541 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192428001.207:669): user pid=21573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192428061.609:670): user pid=21579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192428901.650:671): user pid=21607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192429801.255:672): user pid=21636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192430702.000:673): user pid=21664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192431601.467:674): user pid=21695 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192431661.439:675): user pid=21701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192432201.480:676): user pid=21751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192432501.048:677): user pid=21768 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192433401.313:678): user pid=21797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192434301.247:679): user pid=21825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192435201.655:680): user pid=21865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192435261.076:681): user pid=21871 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192436101.119:682): user pid=21899 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1192436390.904:683): user pid=2705 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=kasal exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192436390.904:684): user pid=2705 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1192436406.251:685): user pid=2705 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192436406.260:686): user pid=2705 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1192436406.261:687): user pid=2705 uid=0 auid=10464 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1192436406.269:688): login pid=2705 uid=0 old auid=10464 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1192436406.333:689): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192436406.427:690): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1192436406.428:691): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1192436417.981:692): avc:  denied  { getsched } for  pid=22160 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192436417.981:692): arch=c000003e syscall=143 success=yes exit=0 a0=5690 a1=2aaaaaad6b38 a2=7fff6a139bf0 a3=782f73747865746e items=0 ppid=22159 pid=22160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192436418.013:693): avc:  denied  { write } for  pid=22160 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192436418.013:693): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=2e736e6f69746361 items=0 ppid=22159 pid=22160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1192436485.574:694): user pid=22311 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192436485.584:695): user pid=22311 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192436485.585:696): user pid=22311 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192436485.595:697): user pid=22311 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192436485.595:698): user pid=22311 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192436485.596:699): user pid=22311 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=AVC msg=audit(1192436489.093:700): avc:  denied  { read write } for  pid=21946 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=2326542 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192436489.093:700): arch=c000003e syscall=30 success=yes exit=-819392512 a0=23800e a1=0 a2=0 a3=0 items=0 ppid=2705 pid=21946 auid=10464 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192436557.005:701): user pid=22391 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1192436558.770:702): user pid=22391 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192436558.780:703): user pid=22391 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192436558.780:704): user pid=22391 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192436558.806:705): user pid=22391 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192436558.807:706): user pid=22391 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192436558.808:707): user pid=22391 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192437001.835:708): user pid=22450 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192437300.941:709): user pid=22505 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192437300.950:710): user pid=22505 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192437300.989:711): user pid=22505 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192437301.009:712): user pid=22505 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192437301.010:713): user pid=22505 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192437301.011:714): user pid=22505 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192437901.662:715): user pid=22799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192438788.610:716): user pid=22903 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192438788.617:717): user pid=22903 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192438788.618:718): user pid=22903 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192438788.625:719): user pid=22903 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192438788.626:720): user pid=22903 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192438788.627:721): user pid=22903 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192438801.394:722): user pid=22943 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192438861.740:723): user pid=22978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192438930.178:724): user pid=23051 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1192438932.746:725): user pid=23051 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192438932.754:726): user pid=23051 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192438932.754:727): user pid=23051 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192438932.763:728): user pid=23051 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192438932.763:729): user pid=23051 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192438932.765:730): user pid=23051 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192439701.891:731): user pid=23197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192440601.965:732): user pid=23292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192441005.553:733): user pid=23326 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192441005.561:734): user pid=23326 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192441005.562:735): user pid=23326 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192441005.571:736): user pid=23326 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192441005.571:737): user pid=23326 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192441005.572:738): user pid=23326 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192441088.586:739): user pid=23374 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192441088.594:740): user pid=23374 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192441088.594:741): user pid=23374 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192441088.596:742): user pid=23374 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192441501.326:743): user pid=23437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CHAUTHTOK msg=audit(1192442285.784:744): user pid=23593 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=polkituser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1192442401.985:745): user pid=23673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192442461.598:746): user pid=23753 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CHAUTHTOK msg=audit(1192442688.492:747): user pid=23975 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=polkituser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1192443120.360:748): avc:  denied  { write } for  pid=24269 comm="load_policy" path="pipe:[3328723]" dev=pipefs ino=3328723 scontext=system_u:system_r:load_policy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1192443120.360:748): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaaccc2a0 a1=2aaaadf2e880 a2=0 a3=0 items=0 ppid=24264 pid=24269 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1192443122.751:749): user pid=2006 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1192443120.555:750): policy loaded auid=500
>type=SYSCALL msg=audit(1192443120.555:750): arch=c000003e syscall=1 success=yes exit=3466517 a0=4 a1=2aaaab878000 a2=34e515 a3=0 items=0 ppid=24264 pid=24269 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192443210.844:751): user pid=24361 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=matej exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CHAUTHTOK msg=audit(1192443258.874:752): user pid=27214 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=haldaemon exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1192443271.743:753): user pid=27227 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192443271.751:754): user pid=27227 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192443271.856:755): user pid=27227 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192443271.876:756): user pid=27227 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192443271.876:757): user pid=27227 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192443271.878:758): user pid=27227 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1192443276.640:759): user pid=27273 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1192443276.715:760): user pid=27274 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192443301.343:761): user pid=27298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AVC msg=audit(1192443389.156:762): user pid=2006 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1192443399.568:763): avc:  denied  { write } for  pid=27414 comm="load_policy" path="pipe:[3328723]" dev=pipefs ino=3328723 scontext=system_u:system_r:load_policy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1192443399.568:763): arch=c000003e syscall=59 success=yes exit=0 a0=7bfe60 a1=2b5a0c0 a2=0 a3=2aaaaaad1210 items=0 ppid=27413 pid=27414 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1192443402.043:764): user pid=2006 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1192443399.747:765): policy loaded auid=500
>type=SYSCALL msg=audit(1192443399.747:765): arch=c000003e syscall=1 success=yes exit=3466517 a0=4 a1=2aaaab878000 a2=34e515 a3=0 items=0 ppid=27413 pid=27414 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1192443402.681:766): user pid=27413 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=system_u new-role=? new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ROLE_CHANGE msg=audit(1192443402.924:767): user pid=27416 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1192443403.202:768): user pid=27417 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="guest_u" old-seuser=? old-role=? old-range=? new-seuser=guest_u new-role=guest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1192443403.418:769): user pid=27418 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="xguest_u" old-seuser=? old-role=? old-range=? new-seuser=xguest_u new-role=xguest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AVC msg=audit(1192443411.558:770): user pid=2006 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1192443419.695:771): avc:  denied  { write } for  pid=27427 comm="load_policy" path="pipe:[3328723]" dev=pipefs ino=3328723 scontext=system_u:system_r:load_policy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1192443419.695:771): arch=c000003e syscall=59 success=yes exit=0 a0=7bfe60 a1=2b5a0c0 a2=0 a3=2aaaaaad1210 items=0 ppid=27426 pid=27427 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1192443421.972:772): user pid=2006 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1192443419.853:773): policy loaded auid=500
>type=SYSCALL msg=audit(1192443419.853:773): arch=c000003e syscall=1 success=yes exit=3466517 a0=4 a1=2aaaab878000 a2=34e515 a3=0 items=0 ppid=27426 pid=27427 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1192443422.589:774): user pid=27426 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=system_u new-role=? new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ROLE_CHANGE msg=audit(1192443422.834:775): user pid=27429 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1192443423.053:776): user pid=27430 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="guest_u" old-seuser=? old-role=? old-range=? new-seuser=guest_u new-role=guest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1192443423.271:777): user pid=27431 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="xguest_u" old-seuser=? old-role=? old-range=? new-seuser=xguest_u new-role=xguest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_LOGIN msg=audit(1192443984.235:778): user pid=28000 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.5, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1192443986.497:779): user pid=28000 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192443986.543:780): user pid=28000 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192443986.555:781): login pid=28000 uid=0 old auid=4294967295 new auid=10464
>type=USER_START msg=audit(1192443986.555:782): user pid=28000 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192443986.559:783): user pid=28003 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192443986.592:784): user pid=28000 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=10464: exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=/dev/pts/0 res=success)'
>type=CRED_DISP msg=audit(1192443991.452:785): user pid=28000 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_END msg=audit(1192443991.453:786): user pid=28000 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192444003.316:787): user pid=28041 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.5, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1192444003.335:788): user pid=28041 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192444003.356:789): user pid=28041 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192444003.359:790): login pid=28041 uid=0 old auid=4294967295 new auid=10464
>type=USER_START msg=audit(1192444003.359:791): user pid=28041 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192444003.362:792): user pid=28044 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192444003.368:793): user pid=28041 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=10464: exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1192444201.399:794): user pid=28091 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192444416.258:795): user pid=28205 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192444416.266:796): user pid=28205 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192444416.267:797): user pid=28205 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192444416.276:798): user pid=28205 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192444416.276:799): user pid=28205 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192444416.277:800): user pid=28205 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192445101.527:801): user pid=28383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192446001.268:802): user pid=28512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192446061.409:803): user pid=28518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192446901.560:804): user pid=28621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192447801.749:805): user pid=28691 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192448701.083:806): user pid=28776 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192449601.912:807): user pid=28899 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192449661.726:808): user pid=28911 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192450501.767:809): user pid=28997 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192451401.064:810): user pid=29071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192452301.040:811): user pid=29136 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453201.659:812): user pid=29207 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453201.660:813): user pid=29206 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453261.989:814): user pid=29222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453261.995:815): user pid=29221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453321.084:816): user pid=29262 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453381.164:817): user pid=29302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453441.504:818): user pid=29309 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453501.581:819): user pid=29316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453561.888:820): user pid=29323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453621.979:821): user pid=29339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453681.064:822): user pid=29348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453741.146:823): user pid=29356 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453801.238:824): user pid=29363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453861.321:825): user pid=29379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453921.410:826): user pid=29397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192453981.496:827): user pid=29403 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454041.583:828): user pid=29412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454101.662:829): user pid=29419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454101.662:830): user pid=29420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454161.543:831): user pid=29430 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454221.620:832): user pid=29448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454281.750:833): user pid=29454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454341.829:834): user pid=29472 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454401.914:835): user pid=29490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454461.992:836): user pid=29501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454521.070:837): user pid=29520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454581.147:838): user pid=29526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454641.229:839): user pid=29533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454701.314:840): user pid=29540 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454761.390:841): user pid=29583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454821.483:842): user pid=29614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192454881.562:843): user pid=29667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192454936.225:844): user pid=29704 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192454936.234:845): user pid=29704 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192454936.235:846): user pid=29704 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192454936.245:847): user pid=29704 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192454936.245:848): user pid=29704 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192454936.247:849): user pid=29704 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192454941.643:850): user pid=29745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1192454949.942:851): user pid=29750 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192454949.945:852): user pid=29750 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192454949.945:853): user pid=29750 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192454949.945:854): user pid=29750 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192455001.751:855): user pid=29798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455001.754:856): user pid=29797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455061.078:857): user pid=29808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455121.156:858): user pid=29889 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455181.236:859): user pid=29902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455241.581:860): user pid=6253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455301.661:861): user pid=18612 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455361.753:862): user pid=29648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455421.845:863): user pid=31663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455481.923:864): user pid=31669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455542.004:865): user pid=31688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192455575.312:866): user pid=31781 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192455575.320:867): user pid=31781 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192455575.321:868): user pid=31781 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192455575.324:869): user pid=31781 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192455575.324:870): user pid=31781 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192455575.325:871): user pid=31781 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192455601.090:872): user pid=31791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455661.170:873): user pid=31805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455721.247:874): user pid=31824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455781.328:875): user pid=31831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455841.417:876): user pid=31841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455901.495:877): user pid=31886 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455901.497:878): user pid=31885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192455961.625:879): user pid=31900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456021.706:880): user pid=31921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456081.791:881): user pid=31958 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456141.872:882): user pid=31975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456201.948:883): user pid=32004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456261.028:884): user pid=32050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456321.112:885): user pid=32074 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456381.189:886): user pid=32095 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456441.267:887): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456501.377:888): user pid=32186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456561.462:889): user pid=32249 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456621.543:890): user pid=32290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456681.627:891): user pid=32319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456741.753:892): user pid=32337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456801.836:893): user pid=32351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192456861.391:894): user pid=32358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192457701.439:895): user pid=32632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192458012.135:896): user pid=32718 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192458012.144:897): user pid=32718 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192458012.145:898): user pid=32718 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192458012.147:899): user pid=32718 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192458012.147:900): user pid=32718 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192458012.148:901): user pid=32718 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/sbin/fetchnews" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192458601.182:902): user pid=591 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192458905.865:903): user pid=807 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192458905.873:904): user pid=807 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192458905.874:905): user pid=807 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192458905.876:906): user pid=807 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192458905.876:907): user pid=807 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192458905.877:908): user pid=807 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192458981.197:909): user pid=841 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192458981.199:910): user pid=841 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192458981.199:911): user pid=841 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192458981.201:912): user pid=841 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192459116.658:913): user pid=866 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192459116.660:914): user pid=866 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192459116.660:915): user pid=866 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192459116.661:916): user pid=866 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192459136.964:917): user pid=868 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192459136.965:918): user pid=868 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192459136.966:919): user pid=868 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192459136.967:920): user pid=868 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192459501.246:921): user pid=937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192460401.329:922): user pid=1586 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192460462.002:923): user pid=1661 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192461301.051:924): user pid=2043 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192462017.761:925): user pid=28041 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_END msg=audit(1192462017.763:926): user pid=28041 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_END msg=audit(1192462064.830:927): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1192462064.831:928): user pid=2705 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1192462083.464:929): avc:  denied  { unlink } for  pid=2082 comm="hcid" name="bluetoothd_address" dev=dm-1 ino=196821 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192462083.464:929): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaaadd6f5 a1=2aaaaad15e60 a2=51 a3=4000 items=0 ppid=1 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hcid" exe="/usr/sbin/hcid" subj=system_u:system_r:bluetooth_t:s0 key=(null)
>type=DAEMON_END msg=audit(1192462090.614:5319): auditd normal halt, sending auid=4294967295 pid=2707 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1823
>type=DAEMON_START msg=audit(1192462235.848:5866): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1808 res=success, auditd pid=1808
>type=CONFIG_CHANGE msg=audit(1192462235.953:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1192462235.956:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1192462236.084:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1192462236.084:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1192462246.633:9): avc:  denied  { name_bind } for  pid=2110 comm="xinetd" src=119 scontext=system_u:system_r:inetd_t:s0 tcontext=system_u:object_r:innd_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1192462246.633:9): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fff51378410 a2=1c a3=0 items=0 ppid=1 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xinetd" exe="/usr/sbin/xinetd" subj=system_u:system_r:inetd_t:s0 key=(null)
>type=AVC msg=audit(1192462282.035:10): avc:  denied  { getattr } for  pid=2670 comm="gdm-binary" path="/boot" dev=sda1 ino=2 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:boot_t:s0 tclass=dir
>type=SYSCALL msg=audit(1192462282.035:10): arch=c000003e syscall=4 success=yes exit=0 a0=69e58a a1=7fff4ca920b0 a2=7fff4ca920b0 a3=0 items=0 ppid=2603 pid=2670 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="gdm-binary" exe="/usr/sbin/gdm-binary" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192462292.299:11): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1192462292.331:12): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1192462292.333:13): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1192462292.371:14): login pid=2670 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1192462292.409:15): user pid=2670 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192462292.483:16): user pid=2670 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1192462292.484:17): user pid=2670 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=hubmaier.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1192462309.279:18): avc:  denied  { getsched } for  pid=2901 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192462309.279:18): arch=c000003e syscall=143 success=yes exit=0 a0=b55 a1=2aaaab0eab68 a2=7fff960b0b60 a3=0 items=0 ppid=2900 pid=2901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192462309.958:19): avc:  denied  { write } for  pid=2901 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671436 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192462309.958:19): arch=c000003e syscall=2 success=yes exit=8 a0=62f4a0 a1=42 a2=1a4 a3=0 items=0 ppid=2900 pid=2901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_AVC msg=audit(1192462310.014:20): user pid=1982 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.15 spid=2901 tpid=2882 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AUTH msg=audit(1192462352.267:21): user pid=3065 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1192462353.542:22): user pid=3065 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192462353.551:23): user pid=3065 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192462353.563:24): user pid=3065 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192462353.570:25): user pid=3065 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192462353.571:26): user pid=3065 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192462353.572:27): user pid=3065 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1192462394.914:28): user pid=3387 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192462394.923:29): user pid=3387 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192462394.950:30): user pid=3387 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192462394.953:31): login pid=3387 uid=0 old auid=4294967295 new auid=10464
>type=USER_START msg=audit(1192462394.953:32): user pid=3387 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192462394.956:33): user pid=3418 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192462394.981:34): user pid=3387 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=10464: exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192462443.805:35): user pid=3633 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192462443.808:36): user pid=3633 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192462443.808:37): user pid=3633 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192462443.810:38): user pid=3633 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1192462446.647:39): user pid=3387 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_END msg=audit(1192462446.649:40): user pid=3387 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192462449.870:41): user pid=3634 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192462449.872:42): user pid=3634 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192462449.872:43): user pid=3634 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192462449.873:44): user pid=3634 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/usr/bin/yum" (terminal=pts/0 res=success)'
>type=AVC msg=audit(1192462576.290:45): avc:  denied  { name_connect } for  pid=2356 comm="squid" dest=59587 scontext=system_u:system_r:squid_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1192462576.290:45): arch=c000003e syscall=42 success=no exit=-115 a0=10 a1=f683e4 a2=10 a3=f715e0 items=0 ppid=2354 pid=2356 auid=4294967295 uid=23 gid=23 euid=23 suid=0 fsuid=23 egid=23 sgid=23 fsgid=23 tty=(none) comm="squid" exe="/usr/sbin/squid" subj=system_u:system_r:squid_t:s0 key=(null)
>type=USER_LOGIN msg=audit(1192462600.439:46): user pid=3640 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.5, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1192462600.458:47): user pid=3640 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192462600.480:48): user pid=3640 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192462600.483:49): login pid=3640 uid=0 old auid=4294967295 new auid=10464
>type=USER_START msg=audit(1192462600.483:50): user pid=3640 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192462600.486:51): user pid=3643 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192462600.493:52): user pid=3640 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=10464: exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192462637.011:53): user pid=3684 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192462637.021:54): user pid=3684 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192462637.022:55): user pid=3684 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192462637.023:56): user pid=3684 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1192462837.220:57): user pid=3772 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192462837.228:58): user pid=3772 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192462837.248:59): user pid=3772 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192462837.251:60): login pid=3772 uid=0 old auid=4294967295 new auid=10464
>type=USER_START msg=audit(1192462837.251:61): user pid=3772 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192462837.254:62): user pid=3776 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1192462837.386:63): user pid=3772 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_END msg=audit(1192462837.387:64): user pid=3772 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192462929.269:65): user pid=3862 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192462929.275:66): user pid=3862 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192462929.275:67): user pid=3862 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192462929.277:68): user pid=3862 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192463102.060:69): user pid=3928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192463152.170:70): user pid=3966 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_AUTH msg=audit(1192463154.049:71): user pid=3966 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192463154.061:72): user pid=3966 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192463154.061:73): user pid=3966 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192463154.071:74): user pid=3966 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192463154.071:75): user pid=3966 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192463154.072:76): user pid=3966 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192463360.910:77): user pid=4062 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192463360.917:78): user pid=4062 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192463360.917:79): user pid=4062 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192463360.918:80): user pid=4062 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192464001.340:81): user pid=4174 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192464061.119:82): user pid=4184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192464450.570:83): user pid=3640 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_END msg=audit(1192464450.571:84): user pid=3640 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192464901.263:85): user pid=4614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192465801.488:86): user pid=6088 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192466245.127:87): user pid=6537 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192466245.137:88): user pid=6537 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192466245.139:89): user pid=6537 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192466245.142:90): user pid=6537 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192466245.142:91): user pid=6537 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192466245.143:92): user pid=6537 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm/Extras/syncevolution/devel" cmd="/usr/sbin/fetchnews" (terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1192466340.498:93): user pid=6625 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192466340.504:94): user pid=6625 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192466340.505:95): user pid=6625 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192466340.508:96): user pid=6625 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192466340.508:97): user pid=6625 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192466340.509:98): user pid=6625 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej" cmd="/bin/rpm" (terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1192466516.651:99): user pid=6734 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192466516.651:100): user pid=6734 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192466516.742:101): user pid=6734 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1192466517.823:102): avc:  denied  { read write } for  pid=2675 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=1343507 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192466517.823:102): arch=c000003e syscall=30 success=yes exit=-824639488 a0=148013 a1=0 a2=0 a3=0 items=0 ppid=2670 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1192466681.679:103): user pid=6734 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192466701.759:104): user pid=6824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192466798.571:105): user pid=6904 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192466798.580:106): user pid=6904 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192466798.581:107): user pid=6904 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192466798.588:108): user pid=6904 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192466798.589:109): user pid=6904 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192466798.590:110): user pid=6904 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1192466834.745:111): user pid=6982 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192466834.753:112): user pid=6982 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192466834.754:113): user pid=6982 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192466834.763:114): user pid=6982 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192466834.763:115): user pid=6982 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192466834.764:116): user pid=6982 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1192467247.897:117): user pid=7137 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1192467259.299:118): user pid=7137 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192467259.307:119): user pid=7137 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192467259.308:120): user pid=7137 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192467259.317:121): user pid=7137 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192467259.317:122): user pid=7137 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192467259.318:123): user pid=7137 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192467601.313:124): user pid=7206 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192467661.299:125): user pid=7220 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192468501.348:126): user pid=7301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192469401.358:127): user pid=7349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192470301.366:128): user pid=7397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192471201.847:129): user pid=7442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192471261.849:130): user pid=7449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192472101.775:131): user pid=7492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192473001.311:132): user pid=7535 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192473901.692:133): user pid=7581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192474801.108:134): user pid=7625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192474862.011:135): user pid=7632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192475701.051:136): user pid=7675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192476601.846:137): user pid=7718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192477501.790:138): user pid=7764 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192478401.284:139): user pid=7807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192478461.713:140): user pid=7814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192479301.757:141): user pid=7858 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192480201.653:142): user pid=7901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192481101.144:143): user pid=7947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192482001.267:144): user pid=7990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192482061.480:145): user pid=7997 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192482901.522:146): user pid=8040 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192483801.841:147): user pid=8083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192484310.932:148): user pid=8111 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192484310.956:149): user pid=8111 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192484310.960:150): login pid=8111 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192484310.961:151): user pid=8111 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192484310.964:152): user pid=8114 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192484311.117:153): user pid=8111 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/0 res=success)'
>type=CRED_DISP msg=audit(1192484337.224:154): user pid=8111 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192484337.225:155): user pid=8111 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192484701.785:156): user pid=8178 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192485601.345:157): user pid=8224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192485661.433:158): user pid=8231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192486501.478:159): user pid=8276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192487401.439:160): user pid=8320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192487563.597:161): user pid=8332 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192487563.619:162): user pid=8332 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192487563.622:163): login pid=8332 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192487563.622:164): user pid=8332 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192487563.625:165): user pid=8335 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192487563.700:166): user pid=8332 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/0 res=success)'
>type=CRED_DISP msg=audit(1192487624.676:167): user pid=8332 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192487624.677:168): user pid=8332 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192487659.771:169): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192487659.789:170): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192487659.792:171): login pid=8400 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192487659.792:172): user pid=8400 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192487659.795:173): user pid=8403 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192488301.487:174): user pid=8465 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192488412.042:175): user pid=8400 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192488412.043:176): user pid=8400 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192489201.801:177): user pid=8508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192489261.443:178): user pid=8516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192490101.486:179): user pid=8558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192491002.000:180): user pid=8601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192491901.105:181): user pid=8647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192492801.856:182): user pid=8690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192492861.161:183): user pid=8698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192493701.203:184): user pid=8740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192494601.087:185): user pid=8783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192495501.384:186): user pid=8829 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192496401.515:187): user pid=8872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192496461.543:188): user pid=8879 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192497301.586:189): user pid=8922 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192498201.663:190): user pid=8965 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192499101.361:191): user pid=9011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192500001.964:192): user pid=9054 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192500061.043:193): user pid=9061 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192500121.078:194): user pid=9070 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192500901.083:195): user pid=9114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192501801.156:196): user pid=9157 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192502701.049:197): user pid=9203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192503601.818:198): user pid=16484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192503661.731:199): user pid=17082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1192503735.504:200): user pid=17538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1192503735.504:201): user pid=17538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1192503735.738:202): user pid=17538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1192503735.738:203): user pid=17538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192504501.085:204): user pid=17611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192505401.561:205): user pid=17654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192506301.080:206): user pid=17700 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192507201.794:207): user pid=17743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192507261.753:208): user pid=17750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192508101.794:209): user pid=17793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192509001.256:210): user pid=17836 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192509901.610:211): user pid=17882 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192510801.216:212): user pid=17925 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192510861.966:213): user pid=17932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192511702.007:214): user pid=17975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192512601.536:215): user pid=18018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192513501.335:216): user pid=18063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192514211.993:217): user pid=18113 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192514212.097:218): user pid=18113 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192514212.101:219): login pid=18113 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1192514212.101:220): user pid=18113 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192514212.104:221): user pid=18116 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192514212.284:222): user pid=18113 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=/dev/pts/0 res=success)'
>type=CRED_DISP msg=audit(1192514323.472:223): user pid=18113 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_END msg=audit(1192514323.473:224): user pid=18113 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=matej exe="/usr/sbin/sshd" (hostname=213.194.211.50, addr=213.194.211.50, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192514401.079:225): user pid=18186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192514461.157:226): user pid=18193 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192515301.203:227): user pid=18246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192516201.552:228): user pid=18305 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192517101.858:229): user pid=18365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192518001.333:230): user pid=18476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192518061.435:231): user pid=18484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192518601.476:232): user pid=18525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_LOGIN msg=audit(1192518795.486:233): user pid=18637 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.5, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1192518797.363:234): user pid=18637 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1192518797.387:235): user pid=18637 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=LOGIN msg=audit(1192518797.390:236): login pid=18637 uid=0 old auid=4294967295 new auid=10464
>type=USER_START msg=audit(1192518797.390:237): user pid=18637 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1192518797.394:238): user pid=18641 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1192518797.426:239): user pid=18637 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=10464: exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1192518901.480:240): user pid=18739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1192518954.115:241): user pid=18637 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_END msg=audit(1192518954.117:242): user pid=18637 uid=0 auid=10464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=kasal exe="/usr/sbin/sshd" (hostname=10.0.0.5, addr=10.0.0.5, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1192519801.499:243): user pid=18809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192520701.293:244): user pid=18875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192521601.902:245): user pid=18937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192521661.238:246): user pid=18945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192522501.283:247): user pid=19005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192523401.925:248): user pid=19068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192524301.345:249): user pid=19132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192525201.710:250): user pid=19193 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192525261.392:251): user pid=19201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192526101.435:252): user pid=19257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192527001.127:253): user pid=19320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192527449.936:254): user pid=19458 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192527449.943:255): user pid=19458 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192527449.945:256): user pid=19458 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192527449.954:257): user pid=19458 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192527449.954:258): user pid=19458 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192527449.956:259): user pid=19458 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1192527631.022:260): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1192527631.022:260): arch=c000003e syscall=16 success=yes exit=0 a0=7 a1=89a2 a2=7fff1e2e8420 a3=0 items=0 ppid=1 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192527901.225:261): user pid=20002 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192527952.158:262): user pid=20066 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=failed)'
>type=USER_AUTH msg=audit(1192527954.116:263): user pid=20066 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1192527954.123:264): user pid=20066 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1192527954.171:265): user pid=20066 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1192527954.177:266): user pid=20066 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1192527954.177:267): user pid=20066 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_CMD msg=audit(1192527954.178:268): user pid=20066 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/4 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1192528571.217:269): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1192528645.739:270): dev=vnet0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1192528645.739:270): arch=c000003e syscall=16 success=yes exit=0 a0=7 a1=89a2 a2=7fff1e2e8420 a3=0 items=0 ppid=1 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192528801.488:271): user pid=20435 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192528861.696:272): user pid=20507 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192529702.063:273): user pid=20919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192529985.023:274): user pid=20983 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192529985.030:275): user pid=20983 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192529985.057:276): user pid=20983 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192529985.066:277): user pid=20983 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192529985.066:278): user pid=20983 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192529985.067:279): user pid=20983 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/2 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1192529994.436:280): dev=vnet0 prom=0 old_prom=256 auid=4294967295
>type=USER_AUTH msg=audit(1192530138.471:281): user pid=21114 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192530138.477:282): user pid=21114 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192530138.478:283): user pid=21114 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192530138.485:284): user pid=21114 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192530138.485:285): user pid=21114 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192530138.486:286): user pid=21114 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=AVC msg=audit(1192530158.979:287): avc:  denied  { read } for  pid=21179 comm="setroubleshootd" name=".rpmmacros" dev=dm-0 ino=3688447 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1192530158.979:287): arch=c000003e syscall=4 success=yes exit=0 a0=7fff6f5fa630 a1=7fff6f5fa9f0 a2=7fff6f5fa9f0 a3=0 items=0 ppid=1 pid=21179 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1192530158.979:288): avc:  denied  { read } for  pid=21179 comm="setroubleshootd" name="rpmmacros" dev=dm-0 ino=3688485 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1192530158.979:288): arch=c000003e syscall=2 success=yes exit=12 a0=83a690 a1=0 a2=1b6 a3=6d items=0 ppid=1 pid=21179 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192530601.050:289): user pid=21228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192530615.814:290): user pid=21232 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AUTH msg=audit(1192530777.478:291): user pid=21232 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192530777.485:292): user pid=21232 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1192530777.485:293): user pid=21232 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1192530777.493:294): user pid=21232 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1192530777.493:295): user pid=21232 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1192530777.494:296): user pid=21232 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1192531501.217:297): user pid=21424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192532401.042:298): user pid=21520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192532461.136:299): user pid=21539 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192533301.235:300): user pid=21621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192534201.681:301): user pid=21719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192535101.511:302): user pid=21813 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192536001.678:303): user pid=21907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192536061.064:304): user pid=21924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192536901.104:305): user pid=22008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192537504.379:306): avc:  denied  { name_connect } for  pid=4127 comm="squid" dest=8000 scontext=system_u:system_r:squid_t:s0 tcontext=system_u:object_r:soundd_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1192537504.379:306): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=101c764 a2=10 a3=ec9f80 items=0 ppid=4125 pid=4127 auid=500 uid=23 gid=23 euid=23 suid=0 fsuid=23 egid=23 sgid=23 fsgid=23 tty=(none) comm="squid" exe="/usr/sbin/squid" subj=system_u:system_r:squid_t:s0 key=(null)
>type=USER_AUTH msg=audit(1192537732.625:307): user pid=1977 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192537732.626:308): user pid=1977 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192537732.829:309): user pid=1977 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1192537744.319:310): avc:  denied  { read write } for  pid=2675 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=2162714 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192537744.319:310): arch=c000003e syscall=30 success=yes exit=-820572160 a0=21001a a1=0 a2=0 a3=0 items=0 ppid=2670 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192537801.586:311): user pid=2017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1192538047.919:312): user pid=1977 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1192538056.588:313): user pid=14371 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192538056.625:314): user pid=14371 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192538056.643:315): user pid=14371 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192538056.647:316): user pid=14371 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192538056.647:317): user pid=14371 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192538056.648:318): user pid=14371 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1192538082.859:319): user pid=14377 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192538082.865:320): user pid=14377 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192538082.870:321): user pid=14377 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192538082.872:322): user pid=14377 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192538082.872:323): user pid=14377 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192538082.873:324): user pid=14377 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192538093.475:325): user pid=14383 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192538093.477:326): user pid=14383 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192538093.477:327): user pid=14383 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192538093.478:328): user pid=14383 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192538108.740:329): user pid=14387 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192538108.746:330): user pid=14387 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192538108.747:331): user pid=14387 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192538108.748:332): user pid=14387 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192538174.447:333): user pid=14458 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192538174.448:334): user pid=14458 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192538174.449:335): user pid=14458 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192538174.450:336): user pid=14458 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1192538508.246:337): user pid=1042 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192538508.253:338): user pid=1042 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192538508.255:339): user pid=1042 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192538508.258:340): user pid=1042 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192538508.258:341): user pid=1042 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192538508.259:342): user pid=1042 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192538562.398:343): user pid=8074 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192538562.400:344): user pid=8074 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192538562.400:345): user pid=8074 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192538562.401:346): user pid=8074 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm" cmd="/bin/rpm" (terminal=pts/1 res=success)'
>type=AVC msg=audit(1192538585.133:347): avc:  denied  { getsched } for  pid=8098 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192538585.133:347): arch=c000003e syscall=143 success=yes exit=0 a0=1fa2 a1=2aaaaacecce8 a2=7fff32e148d0 a3=0 items=0 ppid=8097 pid=8098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192538585.141:348): avc:  denied  { write } for  pid=8098 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671428 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192538585.141:348): arch=c000003e syscall=2 success=yes exit=8 a0=62a720 a1=42 a2=1a4 a3=0 items=0 ppid=8097 pid=8098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192538696.912:349): avc:  denied  { write } for  pid=8113 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671428 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192538696.912:349): arch=c000003e syscall=2 success=yes exit=8 a0=62a720 a1=42 a2=1a4 a3=0 items=0 ppid=8112 pid=8113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192538697.537:350): avc:  denied  { read } for  pid=8113 comm="packagekitd" name="job_count.dat" dev=dm-1 ino=1671432 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192538697.537:350): arch=c000003e syscall=2 success=yes exit=12 a0=41b478 a1=0 a2=0 a3=61642e746e756f63 items=0 ppid=1 pid=8113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192538697.537:351): avc:  denied  { getattr } for  pid=8113 comm="packagekitd" path="/var/run/PackageKit/job_count.dat" dev=dm-1 ino=1671432 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192538697.537:351): arch=c000003e syscall=5 success=yes exit=0 a0=c a1=7fffbbe83b80 a2=7fffbbe83b80 a3=61642e746e756f63 items=0 ppid=1 pid=8113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192538697.539:352): avc:  denied  { unlink } for  pid=8113 comm="packagekitd" name="job_count.dat" dev=dm-1 ino=1671432 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1192538697.539:352): arch=c000003e syscall=82 success=yes exit=0 a0=63bd40 a1=41b478 a2=41 a3=0 items=0 ppid=1 pid=8113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1192538697.591:353): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=8113 comm="packagekitd" sig=11
>type=USER_ACCT msg=audit(1192538702.133:354): user pid=8126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1192538726.166:355): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=8117 comm="packagekitd" sig=11
>type=USER_ACCT msg=audit(1192539601.383:356): user pid=15312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192539601.387:357): user pid=15311 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192539661.611:358): user pid=15352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192539661.625:359): user pid=15351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192539721.732:360): user pid=15372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192539781.806:361): user pid=15383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192539841.501:362): user pid=15399 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192539867.384:363): user pid=15405 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_ACCT msg=audit(1192539901.302:364): user pid=15415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192539961.434:365): user pid=15434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540021.513:366): user pid=15463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192540040.585:367): user pid=15405 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192540040.592:368): user pid=15405 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192540040.593:369): user pid=15405 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192540040.597:370): user pid=15405 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192540040.597:371): user pid=15405 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=news exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192540040.598:372): user pid=15405 uid=9 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/archiv/website/ceplovi.cz/matej/progs/rpms" cmd="/usr/sbin/fetchnews" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192540081.592:373): user pid=15493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540141.673:374): user pid=15504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540201.789:375): user pid=15538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540261.869:376): user pid=15593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540321.943:377): user pid=15629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540381.016:378): user pid=15697 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540441.093:379): user pid=15814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540501.178:380): user pid=15872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540501.194:381): user pid=15871 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540561.045:382): user pid=15898 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540621.121:383): user pid=15906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540681.195:384): user pid=15915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192540741.267:385): user pid=15928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192540761.278:386): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_ACCT msg=audit(1192540801.348:387): user pid=15978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192540848.078:388): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1192540851.584:389): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1192540851.591:390): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1192540851.592:391): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1192540851.600:392): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1192540851.601:393): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1192540851.602:394): user pid=15970 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=AVC msg=audit(1192540858.272:395): avc:  denied  { getsched } for  pid=16060 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192540858.272:395): arch=c000003e syscall=143 success=yes exit=0 a0=3ebc a1=2aaaaacecce8 a2=7fff3b6f81b0 a3=0 items=0 ppid=16059 pid=16060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=AVC msg=audit(1192540858.279:396): avc:  denied  { write } for  pid=16060 comm="packagekitd" name="transactions.db" dev=dm-1 ino=1671428 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1192540858.279:396): arch=c000003e syscall=2 success=yes exit=8 a0=62a720 a1=42 a2=1a4 a3=0 items=0 ppid=16059 pid=16060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1192540861.422:397): user pid=16062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1192540888.912:398): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=16060 comm="packagekitd" sig=11
>type=AVC msg=audit(1192540891.494:399): avc:  denied  { getsched } for  pid=16073 comm="packagekitd" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process
>type=SYSCALL msg=audit(1192540891.494:399): arch=c000003e syscall=143 success=yes exit=0 a0=3ec9 a1=2aaaaacecce8 a2=7ffffbc70720 a3=0 items=0 ppid=16072 pid=16073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="packagekitd" exe="/usr/sbin/packagekitd" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1192540921.024:400): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=16073 comm="packagekitd" sig=11
>type=USER_ACCT msg=audit(1192540921.497:401): user pid=16081 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1192540927.598:402): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:system_dbusd_t:s0 pid=16090 comm="packagekitd" sig=11
>type=USER_ACCT msg=audit(1192540981.571:403): user pid=16096 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1192540998.171:404): avc:  denied  { read write } for  pid=2675 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=2850832 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192540998.171:404): arch=c000003e syscall=30 success=yes exit=-825819136 a0=2b8010 a1=0 a2=0 a3=30b27509f0 items=0 ppid=2670 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1192541005.603:405): user pid=16142 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_ACCT msg=audit(1192541041.645:406): user pid=16149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541101.720:407): user pid=16163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541161.933:408): user pid=16173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541222.008:409): user pid=16182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541281.083:410): user pid=16190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192541305.611:411): user pid=16142 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_ACCT msg=audit(1192541341.185:412): user pid=16199 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541401.260:413): user pid=16209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541401.261:414): user pid=16210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541461.913:415): user pid=16230 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541521.990:416): user pid=16384 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541581.064:417): user pid=16686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541641.138:418): user pid=16695 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541701.216:419): user pid=16815 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541761.289:420): user pid=16824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541821.364:421): user pid=16978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541881.435:422): user pid=17131 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192541941.017:423): user pid=17157 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192542001.153:424): user pid=17173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192542061.798:425): user pid=17209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192542102.323:426): user pid=17235 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1192542102.323:427): user pid=17235 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1192542102.401:428): user pid=17235 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1192542103.327:429): avc:  denied  { read write } for  pid=2675 comm="X" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=2949142 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1192542103.327:429): arch=c000003e syscall=30 success=yes exit=-823459840 a0=2d0016 a1=0 a2=0 a3=0 items=0 ppid=2670 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="X" exe="/usr/bin/Xorg" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1192542121.873:430): user pid=17244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192542181.947:431): user pid=17257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192542241.019:432): user pid=17266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192542301.099:433): user pid=17277 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192542301.109:434): user pid=17276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192542361.935:435): user pid=17292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1192542422.007:436): user pid=17302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=matej exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1192542432.945:437): user pid=17308 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1192542432.954:438): user pid=17308 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1192542432.955:439): user pid=17308 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1192542432.959:440): user pid=17308 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1192542432.959:441): user pid=17308 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1192542432.960:442): user pid=17308 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/matej/rpm/Extras/syncevolution/devel" cmd="/usr/bin/install" (terminal=pts/2 res=success)'

Actions: View

Attachments on bug 316041: 214051 | 228741 | 228751