Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 293039 Details for
Bug 430195
mis-labeled /var/lib caused by passwd shell
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
audit log file
audit.log (text/plain), 1.05 MB, created by
David Highley
on 2008-01-26 04:51:44 UTC
(
hide
)
Description:
audit log file
Filename:
MIME Type:
Creator:
David Highley
Created:
2008-01-26 04:51:44 UTC
Size:
1.05 MB
patch
obsolete
>type=SYSCALL msg=audit(1200955347.922:5982): arch=c000003e syscall=2 success=yes exit=7 a0=2e969f0 a1=90800 a2=0 a3=9 items=0 ppid=13781 pid=13782 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1200956401.586:5983): user pid=13863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200956401.587:5984): user pid=13863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200956401.587:5985): login pid=13863 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200956401.638:5986): user pid=13863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200956461.585:5987): user pid=13889 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200956461.586:5988): user pid=13889 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200956461.586:5989): login pid=13889 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200956461.635:5990): user pid=13889 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200956461.657:5991): user pid=13889 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200956461.657:5992): user pid=13889 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200958110.408:5993): avc: denied { getattr } for pid=14023 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200958110.408:5993): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=14022 pid=14023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200958110.409:5994): avc: denied { search } for pid=14023 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200958110.409:5994): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=14022 pid=14023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200958110.409:5995): avc: denied { append } for pid=14023 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200958110.409:5995): arch=c000003e syscall=2 success=yes exit=4 a0=2ea2670 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=14022 pid=14023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200958110.409:5996): avc: denied { ioctl } for pid=14023 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200958110.409:5996): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff39488a40 a3=31cc1529f0 items=0 ppid=14022 pid=14023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200958110.409:5997): avc: denied { getattr } for pid=14023 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200958110.409:5997): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=14022 pid=14023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200958110.409:5998): avc: denied { getattr } for pid=14023 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200958110.409:5998): arch=c000003e syscall=6 success=yes exit=0 a0=2ea5e40 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=14022 pid=14023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200958110.409:5999): avc: denied { read } for pid=14023 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200958110.409:5999): arch=c000003e syscall=89 success=yes exit=17 a0=2ea5e40 a1=7fff39487e80 a2=fff a3=31cc1529f0 items=0 ppid=14022 pid=14023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200958110.410:6000): avc: denied { read } for pid=14023 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200958110.410:6000): arch=c000003e syscall=2 success=yes exit=7 a0=2eb20b0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=14022 pid=14023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200958110.411:6001): avc: denied { read } for pid=14023 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200958110.411:6001): arch=c000003e syscall=2 success=yes exit=7 a0=2ea1f40 a1=90800 a2=0 a3=9 items=0 ppid=14022 pid=14023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1200960061.670:6002): user pid=14145 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200960061.671:6003): user pid=14145 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200960061.671:6004): login pid=14145 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200960061.720:6005): user pid=14145 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200960061.743:6006): user pid=14145 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200960061.743:6007): user pid=14145 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200963661.756:6008): user pid=14364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200963661.756:6009): user pid=14364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200963661.756:6010): login pid=14364 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200963661.808:6011): user pid=14364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200963661.831:6012): user pid=14364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200963661.832:6013): user pid=14364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200964131.688:6014): avc: denied { append } for pid=14421 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200964131.688:6014): arch=c000003e syscall=2 success=yes exit=4 a0=2e67ec0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=14420 pid=14421 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200964131.688:6015): avc: denied { ioctl } for pid=14421 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200964131.688:6015): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffc2abd070 a3=31cc1529f0 items=0 ppid=14420 pid=14421 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200964131.688:6016): avc: denied { getattr } for pid=14421 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200964131.688:6016): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=14420 pid=14421 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200964131.689:6017): avc: denied { getattr } for pid=14421 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200964131.689:6017): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=14420 pid=14421 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200964131.689:6018): avc: denied { search } for pid=14421 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200964131.689:6018): arch=c000003e syscall=6 success=yes exit=0 a0=2e6b690 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=14420 pid=14421 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200964131.690:6019): avc: denied { read } for pid=14421 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200964131.690:6019): arch=c000003e syscall=2 success=yes exit=7 a0=2e6f960 a1=0 a2=0 a3=3b162f5170 items=0 ppid=14420 pid=14421 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200964131.690:6020): avc: denied { read } for pid=14421 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200964131.690:6020): arch=c000003e syscall=2 success=yes exit=7 a0=2e677e0 a1=90800 a2=0 a3=9 items=0 ppid=14420 pid=14421 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1200964388.638:6021): user pid=13863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200964388.638:6022): user pid=13863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200967201.648:6023): user pid=14619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200967201.649:6024): user pid=14619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200967201.649:6025): login pid=14619 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200967201.700:6026): user pid=14619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200967261.649:6027): user pid=14648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200967261.649:6028): user pid=14648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200967261.649:6029): login pid=14648 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200967261.702:6030): user pid=14648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200967261.725:6031): user pid=14648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200967261.726:6032): user pid=14648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200967906.984:6033): avc: denied { getattr } for pid=14703 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200967906.984:6033): arch=c000003e syscall=6 success=yes exit=0 a0=2e8c980 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=14702 pid=14703 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200967906.984:6034): avc: denied { read } for pid=14703 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200967906.984:6034): arch=c000003e syscall=89 success=yes exit=17 a0=2e8c980 a1=7fff4e3e1dd0 a2=fff a3=31cc1529f0 items=0 ppid=14702 pid=14703 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1200970861.737:6035): user pid=14868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200970861.738:6036): user pid=14868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200970861.738:6037): login pid=14868 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200970861.790:6038): user pid=14868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200970861.811:6039): user pid=14868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200970861.811:6040): user pid=14868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200974461.824:6041): user pid=15078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200974461.824:6042): user pid=15078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200974461.824:6043): login pid=15078 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200974461.875:6044): user pid=15078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200974461.895:6045): user pid=15078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200974461.895:6046): user pid=15078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200974740.859:6047): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1200974740.864:6048): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1200974740.872:6049): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1200974740.890:6050): login pid=2974 uid=0 old auid=1000 new auid=1000 >type=USER_ROLE_CHANGE msg=audit(1200974740.910:6051): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200974740.926:6052): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1200974740.927:6053): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1200974768.558:6054): user pid=15489 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct=dhighley exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1200974768.562:6055): user pid=15489 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct=dhighley exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1200974918.678:6056): user pid=15554 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct=dhighley exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1200974918.681:6057): user pid=15554 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct=dhighley exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=CRED_DISP msg=audit(1200975189.091:6058): user pid=14619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200975189.092:6059): user pid=14619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200975769.047:6060): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1200975769.047:6061): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1200975818.356:6062): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=mhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1200975818.361:6063): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=mhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1200975818.368:6064): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=mhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1200975818.385:6065): login pid=2974 uid=0 old auid=1000 new auid=1001 >type=USER_ROLE_CHANGE msg=audit(1200975818.404:6066): user pid=2974 uid=0 auid=1001 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200975818.420:6067): user pid=2974 uid=0 auid=1001 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=mhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1200975818.421:6068): user pid=2974 uid=0 auid=1001 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1001: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_END msg=audit(1200976556.637:6069): user pid=2974 uid=0 auid=1001 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=mhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1200976556.637:6070): user pid=2974 uid=0 auid=1001 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=mhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1200978001.106:6071): user pid=16590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200978001.106:6072): user pid=16590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200978001.107:6073): login pid=16590 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200978001.159:6074): user pid=16590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200978061.104:6075): user pid=16615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200978061.105:6076): user pid=16615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200978061.105:6077): login pid=16615 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200978061.157:6078): user pid=16615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200978061.179:6079): user pid=16615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200978061.180:6080): user pid=16615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200979301.286:6081): avc: denied { getattr } for pid=16707 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200979301.286:6081): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=16706 pid=16707 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200979301.286:6082): avc: denied { search } for pid=16707 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200979301.286:6082): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=16706 pid=16707 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200979301.286:6083): avc: denied { append } for pid=16707 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200979301.286:6083): arch=c000003e syscall=2 success=yes exit=4 a0=2e843a0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=16706 pid=16707 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200979301.287:6084): avc: denied { ioctl } for pid=16707 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200979301.287:6084): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff87cc1270 a3=31cc1529f0 items=0 ppid=16706 pid=16707 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200979301.287:6085): avc: denied { getattr } for pid=16707 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200979301.287:6085): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=16706 pid=16707 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200979301.287:6086): avc: denied { getattr } for pid=16707 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200979301.287:6086): arch=c000003e syscall=6 success=yes exit=0 a0=2e87b70 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=16706 pid=16707 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200979301.287:6087): avc: denied { read } for pid=16707 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200979301.287:6087): arch=c000003e syscall=89 success=yes exit=17 a0=2e87b70 a1=7fff87cc06b0 a2=fff a3=31cc1529f0 items=0 ppid=16706 pid=16707 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200979301.288:6088): avc: denied { read } for pid=16707 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200979301.288:6088): arch=c000003e syscall=2 success=yes exit=7 a0=2e8b2c0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=16706 pid=16707 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200979301.288:6089): avc: denied { read } for pid=16707 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200979301.288:6089): arch=c000003e syscall=2 success=yes exit=7 a0=2e83cc0 a1=90800 a2=0 a3=9 items=0 ppid=16706 pid=16707 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1200981661.192:6090): user pid=16849 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200981661.192:6091): user pid=16849 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200981661.192:6092): login pid=16849 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200981661.245:6093): user pid=16849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200981661.269:6094): user pid=16849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200981661.270:6095): user pid=16849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200981717.525:6096): avc: denied { getattr } for pid=16882 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200981717.525:6096): arch=c000003e syscall=6 success=yes exit=0 a0=2ed7480 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=16881 pid=16882 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200981717.525:6097): avc: denied { read } for pid=16882 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200981717.525:6097): arch=c000003e syscall=89 success=yes exit=17 a0=2ed7480 a1=7fff8eef58f0 a2=fff a3=31cc1529f0 items=0 ppid=16881 pid=16882 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200984609.007:6098): avc: denied { search } for pid=17046 comm="clamav-milter" name="bin" dev=dm-0 ino=12288001 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir >type=AVC msg=audit(1200984609.007:6098): avc: denied { read } for pid=17046 comm="clamav-milter" name="sh" dev=dm-0 ino=12288051 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=lnk_file >type=AVC msg=audit(1200984609.007:6098): avc: denied { execute } for pid=17046 comm="clamav-milter" name="bash" dev=dm-0 ino=12288025 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file >type=AVC msg=audit(1200984609.007:6098): avc: denied { read } for pid=17046 comm="clamav-milter" name="bash" dev=dm-0 ino=12288025 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file >type=AVC msg=audit(1200984609.007:6098): avc: denied { execute_no_trans } for pid=17046 comm="clamav-milter" path="/bin/bash" dev=dm-0 ino=12288025 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1200984609.007:6098): arch=c000003e syscall=59 success=yes exit=0 a0=31cbf20518 a1=43c022d0 a2=7fff87e51018 a3=43c059e0 items=0 ppid=29221 pid=17046 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1200984609.016:6099): avc: denied { getattr } for pid=17046 comm="sh" path="/bin/bash" dev=dm-0 ino=12288025 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1200984609.016:6099): arch=c000003e syscall=4 success=yes exit=0 a0=8c4a40 a1=7fffce9c8650 a2=7fffce9c8650 a3=31cc1529f0 items=0 ppid=29221 pid=17046 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1200984609.016:6100): avc: denied { execute } for pid=17046 comm="sh" name="sendmail.sendmail" dev=dm-0 ino=4645032 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:sendmail_exec_t:s0 tclass=file >type=AVC msg=audit(1200984609.016:6100): avc: denied { read } for pid=17046 comm="sh" name="sendmail.sendmail" dev=dm-0 ino=4645032 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:sendmail_exec_t:s0 tclass=file >type=AVC msg=audit(1200984609.016:6100): avc: denied { execute_no_trans } for pid=17046 comm="sh" path="/usr/sbin/sendmail.sendmail" dev=dm-0 ino=4645032 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:sendmail_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1200984609.016:6100): arch=c000003e syscall=59 success=yes exit=0 a0=8c83a0 a1=8c75d0 a2=8c72d0 a3=8 items=0 ppid=29221 pid=17046 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1200984609.024:6101): avc: denied { search } for pid=17046 comm="sendmail" name="clientmqueue" dev=dm-0 ino=27001260 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=dir >type=SYSCALL msg=audit(1200984609.024:6101): arch=c000003e syscall=80 success=yes exit=0 a0=7fff12b18010 a1=2aaaaae1fb57 a2=fff a3=0 items=0 ppid=29221 pid=17046 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1200984609.024:6102): avc: denied { getattr } for pid=17046 comm="sendmail" path="/var/spool/clientmqueue" dev=dm-0 ino=27001260 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=dir >type=SYSCALL msg=audit(1200984609.024:6102): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaaab5d23c a1=7fff12b13f70 a2=7fff12b13f70 a3=0 items=0 ppid=29221 pid=17046 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1200984609.027:6103): avc: denied { getattr } for pid=17046 comm="sendmail" name="/" dev=dm-0 ino=2 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1200984609.027:6103): arch=c000003e syscall=137 success=yes exit=0 a0=2aaaaae1efe0 a1=7fff12b18470 a2=47959223 a3=0 items=0 ppid=29221 pid=17046 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1200984609.027:6104): avc: denied { write } for pid=17046 comm="sendmail" name="clientmqueue" dev=dm-0 ino=27001260 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=dir >type=AVC msg=audit(1200984609.027:6104): avc: denied { add_name } for pid=17046 comm="sendmail" name="dfm0M6o9lS017046" scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=dir >type=AVC msg=audit(1200984609.027:6104): avc: denied { create } for pid=17046 comm="sendmail" name="dfm0M6o9lS017046" scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=file >type=AVC msg=audit(1200984609.027:6104): avc: denied { read write } for pid=17046 comm="sendmail" name="dfm0M6o9lS017046" dev=dm-0 ino=27001804 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=file >type=SYSCALL msg=audit(1200984609.027:6104): arch=c000003e syscall=2 success=yes exit=3 a0=2aaaaae4a7e0 a1=c2 a2=1b0 a3=2 items=0 ppid=29221 pid=17046 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1200984609.027:6105): avc: denied { getattr } for pid=17046 comm="sendmail" path="/var/spool/clientmqueue/dfm0M6o9lS017046" dev=dm-0 ino=27001804 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=file >type=SYSCALL msg=audit(1200984609.027:6105): arch=c000003e syscall=5 success=yes exit=0 a0=3 a1=7fff12b18430 a2=7fff12b18430 a3=2 items=0 ppid=29221 pid=17046 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1200984609.027:6106): avc: denied { lock } for pid=17046 comm="sendmail" path="/var/spool/clientmqueue/dfm0M6o9lS017046" dev=dm-0 ino=27001804 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=file >type=SYSCALL msg=audit(1200984609.027:6106): arch=c000003e syscall=72 success=yes exit=0 a0=3 a1=7 a2=7fff12b183c0 a3=2 items=0 ppid=29221 pid=17046 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1200984609.033:6107): avc: denied { remove_name } for pid=17046 comm="sendmail" name="tfm0M6o9lS017046" dev=dm-0 ino=27001806 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=dir >type=AVC msg=audit(1200984609.033:6107): avc: denied { rename } for pid=17046 comm="sendmail" name="tfm0M6o9lS017046" dev=dm-0 ino=27001806 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=file >type=AVC msg=audit(1200984609.033:6107): avc: denied { unlink } for pid=17046 comm="sendmail" name="qfm0M6o9lS017046" dev=dm-0 ino=27001805 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=file >type=SYSCALL msg=audit(1200984609.033:6107): arch=c000003e syscall=82 success=yes exit=0 a0=7fff12b13e00 a1=7fff12b14e00 a2=fff a3=0 items=0 ppid=29221 pid=17046 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1200984609.033:6108): avc: denied { read } for pid=17046 comm="sendmail" name="clientmqueue" dev=dm-0 ino=27001260 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=dir >type=SYSCALL msg=audit(1200984609.033:6108): arch=c000003e syscall=2 success=yes exit=7 a0=7fff12b112f0 a1=0 a2=1c0 a3=7fff12b11302 items=0 ppid=29221 pid=17046 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1200984663.731:6109): avc: denied { append } for pid=17067 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200984663.731:6109): arch=c000003e syscall=2 success=yes exit=4 a0=2fa49b0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=17066 pid=17067 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200984663.731:6110): avc: denied { ioctl } for pid=17067 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200984663.731:6110): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff5bd382f0 a3=31cc1529f0 items=0 ppid=17066 pid=17067 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200984663.731:6111): avc: denied { getattr } for pid=17067 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200984663.731:6111): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=17066 pid=17067 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200984663.732:6112): avc: denied { read } for pid=17067 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200984663.732:6112): arch=c000003e syscall=2 success=yes exit=7 a0=2fb54e0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=17066 pid=17067 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1200985261.282:6113): user pid=17104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200985261.282:6114): user pid=17104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200985261.282:6115): login pid=17104 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200985261.333:6116): user pid=17104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200985261.358:6117): user pid=17104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200985261.358:6118): user pid=17104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200985987.799:6119): user pid=16590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200985987.799:6120): user pid=16590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200986167.323:6121): avc: denied { getattr } for pid=17180 comm="spamassassin" path="/home/phighley/.razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200986167.323:6121): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=17179 pid=17180 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200986167.323:6122): avc: denied { search } for pid=17180 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200986167.323:6122): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=17179 pid=17180 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200986167.325:6123): avc: denied { read } for pid=17180 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200986167.325:6123): arch=c000003e syscall=2 success=yes exit=7 a0=2e85f40 a1=90800 a2=0 a3=9 items=0 ppid=17179 pid=17180 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200986252.240:6124): avc: denied { getattr } for pid=17192 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200986252.240:6124): arch=c000003e syscall=6 success=yes exit=0 a0=2eb0a40 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=17191 pid=17192 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200986252.240:6125): avc: denied { read } for pid=17192 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200986252.240:6125): arch=c000003e syscall=89 success=yes exit=17 a0=2eb0a40 a1=7fff12fc19b0 a2=fff a3=31cc1529f0 items=0 ppid=17191 pid=17192 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1200988801.811:6126): user pid=17448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200988801.812:6127): user pid=17448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200988801.812:6128): login pid=17448 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200988801.862:6129): user pid=17448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200988861.811:6130): user pid=17474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200988861.812:6131): user pid=17474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200988861.812:6132): login pid=17474 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200988861.862:6133): user pid=17474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200988861.884:6134): user pid=17474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200988861.885:6135): user pid=17474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200992461.896:6136): user pid=17733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200992461.897:6137): user pid=17733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200992461.897:6138): login pid=17733 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200992461.948:6139): user pid=17733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200992461.970:6140): user pid=17733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200992461.971:6141): user pid=17733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200992685.913:6142): avc: denied { getattr } for pid=17766 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200992685.913:6142): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=17765 pid=17766 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200992685.913:6143): avc: denied { search } for pid=17766 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200992685.913:6143): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=17765 pid=17766 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200992685.913:6144): avc: denied { append } for pid=17766 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200992685.913:6144): arch=c000003e syscall=2 success=yes exit=4 a0=2e8b870 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=17765 pid=17766 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200992685.913:6145): avc: denied { ioctl } for pid=17766 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200992685.913:6145): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffdef71520 a3=31cc1529f0 items=0 ppid=17765 pid=17766 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200992685.913:6146): avc: denied { getattr } for pid=17766 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200992685.913:6146): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=17765 pid=17766 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200992685.914:6147): avc: denied { read } for pid=17766 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200992685.914:6147): arch=c000003e syscall=2 success=yes exit=7 a0=2e932f0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=17765 pid=17766 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200992685.915:6148): avc: denied { read } for pid=17766 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200992685.915:6148): arch=c000003e syscall=2 success=yes exit=7 a0=2e8b140 a1=90800 a2=0 a3=9 items=0 ppid=17765 pid=17766 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200996059.913:6149): avc: denied { getattr } for pid=17979 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200996059.913:6149): arch=c000003e syscall=6 success=yes exit=0 a0=2ee4d20 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=17978 pid=17979 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1200996059.913:6150): avc: denied { read } for pid=17979 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200996059.913:6150): arch=c000003e syscall=89 success=yes exit=17 a0=2ee4d20 a1=7fff974f2ee0 a2=fff a3=31cc1529f0 items=0 ppid=17978 pid=17979 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1200996061.983:6151): user pid=17989 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200996061.984:6152): user pid=17989 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200996061.984:6153): login pid=17989 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200996062.037:6154): user pid=17989 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200996062.061:6155): user pid=17989 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200996062.061:6156): user pid=17989 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200996787.955:6157): user pid=17448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200996787.955:6158): user pid=17448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200999601.966:6159): user pid=18191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200999601.966:6160): user pid=18191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200999601.966:6161): login pid=18191 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200999602.020:6162): user pid=18191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200999661.966:6163): user pid=18219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200999661.967:6164): user pid=18219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200999661.967:6165): login pid=18219 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200999662.017:6166): user pid=18219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200999662.036:6167): user pid=18219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200999662.037:6168): user pid=18219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201003261.048:6169): user pid=18512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201003261.048:6170): user pid=18512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201003261.048:6171): login pid=18512 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201003261.101:6172): user pid=18512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201003261.120:6173): user pid=18512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201003261.121:6174): user pid=18512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201003321.126:6175): user pid=18539 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201003321.127:6176): user pid=18539 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201003321.127:6177): login pid=18539 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201003321.180:6178): user pid=18539 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201006690.870:6179): user pid=18539 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201006690.870:6180): user pid=18539 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201006795.040:6181): avc: denied { getattr } for pid=19477 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201006795.040:6181): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=19476 pid=19477 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201006795.041:6182): avc: denied { search } for pid=19477 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201006795.041:6182): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=19476 pid=19477 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201006795.041:6183): avc: denied { append } for pid=19477 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201006795.041:6183): arch=c000003e syscall=2 success=yes exit=4 a0=2f02e00 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=19476 pid=19477 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201006795.041:6184): avc: denied { ioctl } for pid=19477 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201006795.041:6184): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff9757db30 a3=31cc1529f0 items=0 ppid=19476 pid=19477 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201006795.041:6185): avc: denied { getattr } for pid=19477 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201006795.041:6185): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=19476 pid=19477 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201006795.042:6186): avc: denied { read } for pid=19477 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201006795.042:6186): arch=c000003e syscall=2 success=yes exit=7 a0=2f0e270 a1=0 a2=0 a3=3b162f5170 items=0 ppid=19476 pid=19477 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201006795.043:6187): avc: denied { read } for pid=19477 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201006795.043:6187): arch=c000003e syscall=2 success=yes exit=7 a0=2f026d0 a1=90800 a2=0 a3=9 items=0 ppid=19476 pid=19477 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201006861.878:6188): user pid=19491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201006861.879:6189): user pid=19491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201006861.879:6190): login pid=19491 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201006861.930:6191): user pid=19491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201006861.953:6192): user pid=19491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201006861.954:6193): user pid=19491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201007588.126:6194): user pid=18191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201007588.126:6195): user pid=18191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201007633.354:6196): avc: denied { getattr } for pid=19580 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201007633.354:6196): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=19579 pid=19580 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201007633.354:6197): avc: denied { search } for pid=19580 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201007633.354:6197): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=19579 pid=19580 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201007633.355:6198): avc: denied { append } for pid=19580 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201007633.355:6198): arch=c000003e syscall=2 success=yes exit=4 a0=2f8e370 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=19579 pid=19580 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201007633.355:6199): avc: denied { ioctl } for pid=19580 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201007633.355:6199): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff606abc60 a3=31cc1529f0 items=0 ppid=19579 pid=19580 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201007633.355:6200): avc: denied { getattr } for pid=19580 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201007633.355:6200): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=19579 pid=19580 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201007633.356:6201): avc: denied { read } for pid=19580 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201007633.356:6201): arch=c000003e syscall=2 success=yes exit=7 a0=2f98cd0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=19579 pid=19580 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201007633.357:6202): avc: denied { read } for pid=19580 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201007633.357:6202): arch=c000003e syscall=2 success=yes exit=7 a0=2f8dc90 a1=90800 a2=0 a3=9 items=0 ppid=19579 pid=19580 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1201007897.713:6203): auid=1000 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=19622 comm="mythfilldatabas" sig=11 >type=AVC msg=audit(1201009397.114:6204): avc: denied { getattr } for pid=19821 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201009397.114:6204): arch=c000003e syscall=6 success=yes exit=0 a0=2f0a4f0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=19820 pid=19821 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201009397.114:6205): avc: denied { read } for pid=19821 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201009397.114:6205): arch=c000003e syscall=89 success=yes exit=17 a0=2f0a4f0 a1=7ffffb485e80 a2=fff a3=31cc1529f0 items=0 ppid=19820 pid=19821 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201010401.137:6206): user pid=19928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201010401.138:6207): user pid=19928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201010401.138:6208): login pid=19928 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201010401.191:6209): user pid=19928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201010461.137:6210): user pid=19945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201010461.138:6211): user pid=19945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201010461.138:6212): login pid=19945 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201010461.187:6213): user pid=19945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201010461.206:6214): user pid=19945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201010461.206:6215): user pid=19945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201012441.549:6216): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201012441.552:6217): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201012441.572:6218): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1201012441.617:6219): login pid=20123 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201012441.618:6220): user pid=20123 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201012441.621:6221): user pid=20138 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/2 res=success)' >type=CRED_REFR msg=audit(1201012441.628:6222): user pid=20138 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1201012452.890:6223): user pid=20123 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1201012452.890:6224): user pid=20123 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201012492.333:6225): user pid=20191 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201012492.345:6226): user pid=20191 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1201012492.359:6227): login pid=20191 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1201012492.360:6228): user pid=20191 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201012492.370:6229): user pid=20197 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201012492.372:6230): user pid=20191 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/2 res=success)' >type=CRED_DISP msg=audit(1201012879.946:6231): user pid=20191 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1201012879.946:6232): user pid=20191 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1201013723.923:6233): avc: denied { getattr } for pid=20332 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201013723.923:6233): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=20331 pid=20332 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201013723.923:6234): avc: denied { search } for pid=20332 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201013723.923:6234): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=20331 pid=20332 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201013723.924:6235): avc: denied { append } for pid=20332 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201013723.924:6235): arch=c000003e syscall=2 success=yes exit=4 a0=2eb7470 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=20331 pid=20332 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201013723.924:6236): avc: denied { ioctl } for pid=20332 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201013723.924:6236): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffd290bec0 a3=31cc1529f0 items=0 ppid=20331 pid=20332 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201013723.924:6237): avc: denied { getattr } for pid=20332 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201013723.924:6237): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=20331 pid=20332 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201013723.924:6238): avc: denied { getattr } for pid=20332 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201013723.924:6238): arch=c000003e syscall=6 success=yes exit=0 a0=2ebac40 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=20331 pid=20332 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201013723.925:6239): avc: denied { read } for pid=20332 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201013723.925:6239): arch=c000003e syscall=89 success=yes exit=17 a0=2ebac40 a1=7fffd290b300 a2=fff a3=31cc1529f0 items=0 ppid=20331 pid=20332 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201013723.926:6240): avc: denied { read } for pid=20332 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201013723.926:6240): arch=c000003e syscall=2 success=yes exit=7 a0=2ec7000 a1=0 a2=0 a3=3b162f5170 items=0 ppid=20331 pid=20332 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201013723.926:6241): avc: denied { read } for pid=20332 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201013723.926:6241): arch=c000003e syscall=2 success=yes exit=7 a0=2eb6d40 a1=90800 a2=0 a3=9 items=0 ppid=20331 pid=20332 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201014061.219:6242): user pid=20349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201014061.220:6243): user pid=20349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201014061.220:6244): login pid=20349 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201014061.270:6245): user pid=20349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201014061.293:6246): user pid=20349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201014061.293:6247): user pid=20349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201015871.462:6248): avc: denied { write } for pid=20520 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201015871.462:6248): avc: denied { add_name } for pid=20520 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201015871.462:6248): avc: denied { create } for pid=20520 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=AVC msg=audit(1201015871.462:6248): avc: denied { write } for pid=20520 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127853 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201015871.462:6248): arch=c000003e syscall=2 success=yes exit=9 a0=2ee76a0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=20519 pid=20520 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201015871.462:6249): avc: denied { remove_name } for pid=20520 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127853 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201015871.462:6249): avc: denied { unlink } for pid=20520 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127853 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201015871.462:6249): arch=c000003e syscall=87 success=yes exit=0 a0=2ee76a0 a1=1f3b970 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=20519 pid=20520 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201016759.803:6250): avc: denied { getattr } for pid=21003 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201016759.803:6250): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=21002 pid=21003 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201016759.803:6251): avc: denied { search } for pid=21003 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201016759.803:6251): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=21002 pid=21003 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201016759.803:6252): avc: denied { append } for pid=21003 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201016759.803:6252): arch=c000003e syscall=2 success=yes exit=4 a0=2e81960 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=21002 pid=21003 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201016759.803:6253): avc: denied { ioctl } for pid=21003 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201016759.803:6253): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff33bae160 a3=31cc1529f0 items=0 ppid=21002 pid=21003 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201016759.803:6254): avc: denied { getattr } for pid=21003 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201016759.803:6254): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=21002 pid=21003 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201016759.804:6255): avc: denied { read } for pid=21003 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201016759.804:6255): arch=c000003e syscall=2 success=yes exit=7 a0=2e8c840 a1=0 a2=0 a3=3b162f5170 items=0 ppid=21002 pid=21003 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201016759.805:6256): avc: denied { read } for pid=21003 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201016759.805:6256): arch=c000003e syscall=2 success=yes exit=7 a0=2e81280 a1=90800 a2=0 a3=9 items=0 ppid=21002 pid=21003 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201017661.305:6257): user pid=21756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201017661.306:6258): user pid=21756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201017661.306:6259): login pid=21756 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201017661.356:6260): user pid=21756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201017661.379:6261): user pid=21756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201017661.380:6262): user pid=21756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201018387.851:6263): user pid=19928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201018387.852:6264): user pid=19928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201020557.738:6265): avc: denied { getattr } for pid=22304 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201020557.738:6265): arch=c000003e syscall=6 success=yes exit=0 a0=2ed39b0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=22303 pid=22304 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201020557.738:6266): avc: denied { read } for pid=22304 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201020557.738:6266): arch=c000003e syscall=89 success=yes exit=17 a0=2ed39b0 a1=7fff87b0e500 a2=fff a3=31cc1529f0 items=0 ppid=22303 pid=22304 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201021201.862:6267): user pid=22341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201021201.863:6268): user pid=22341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201021201.863:6269): login pid=22341 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201021201.915:6270): user pid=22341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201021261.862:6271): user pid=22364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201021261.863:6272): user pid=22364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201021261.863:6273): login pid=22364 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201021261.915:6274): user pid=22364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201021261.938:6275): user pid=22364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201021261.939:6276): user pid=22364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201024862.076:6277): user pid=22599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201024862.102:6278): user pid=22599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201024862.102:6279): login pid=22599 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201024862.152:6280): user pid=22599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201024862.269:6281): user pid=22599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201024862.269:6282): user pid=22599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201028461.374:6283): user pid=22901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201028461.374:6284): user pid=22901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201028461.374:6285): login pid=22901 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201028461.434:6286): user pid=22901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201028461.534:6287): user pid=22901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201028461.535:6288): user pid=22901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201029188.235:6289): user pid=22341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201029188.235:6290): user pid=22341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201031110.732:6291): user pid=23099 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201031110.773:6292): user pid=23099 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1201031110.799:6293): login pid=23099 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1201031110.799:6294): user pid=23099 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201031110.808:6295): user pid=23106 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201031110.826:6296): user pid=23099 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/2 res=success)' >type=CRED_DISP msg=audit(1201031695.574:6297): user pid=23099 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1201031695.574:6298): user pid=23099 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1201031865.037:6299): avc: denied { getattr } for pid=23243 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201031865.037:6299): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=23242 pid=23243 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201031865.037:6300): avc: denied { search } for pid=23243 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201031865.037:6300): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=23242 pid=23243 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201031865.037:6301): avc: denied { append } for pid=23243 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201031865.037:6301): arch=c000003e syscall=2 success=yes exit=4 a0=30d5c40 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=23242 pid=23243 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201031865.037:6302): avc: denied { ioctl } for pid=23243 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201031865.037:6302): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffc27b2d60 a3=31cc1529f0 items=0 ppid=23242 pid=23243 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201031865.038:6303): avc: denied { getattr } for pid=23243 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201031865.038:6303): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=23242 pid=23243 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201031865.038:6304): avc: denied { getattr } for pid=23243 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201031865.038:6304): arch=c000003e syscall=6 success=yes exit=0 a0=30d9410 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=23242 pid=23243 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201031865.038:6305): avc: denied { read } for pid=23243 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201031865.038:6305): arch=c000003e syscall=89 success=yes exit=17 a0=30d9410 a1=7fffc27b21a0 a2=fff a3=31cc1529f0 items=0 ppid=23242 pid=23243 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201031865.040:6306): avc: denied { read } for pid=23243 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201031865.040:6306): arch=c000003e syscall=2 success=yes exit=7 a0=30dea30 a1=0 a2=0 a3=3b162f5170 items=0 ppid=23242 pid=23243 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201031865.040:6307): avc: denied { read } for pid=23243 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201031865.040:6307): arch=c000003e syscall=2 success=yes exit=7 a0=30d5560 a1=90800 a2=0 a3=9 items=0 ppid=23242 pid=23243 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201032001.304:6308): user pid=23253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201032001.305:6309): user pid=23253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201032001.305:6310): login pid=23253 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201032001.358:6311): user pid=23253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201032061.266:6312): user pid=23271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201032061.266:6313): user pid=23271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201032061.267:6314): login pid=23271 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201032061.319:6315): user pid=23271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201032061.382:6316): user pid=23271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201032061.382:6317): user pid=23271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201032829.579:6318): avc: denied { getattr } for pid=23344 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201032829.579:6318): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=23343 pid=23344 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201032829.579:6319): avc: denied { search } for pid=23344 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201032829.579:6319): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=23343 pid=23344 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201032829.579:6320): avc: denied { append } for pid=23344 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201032829.579:6320): arch=c000003e syscall=2 success=yes exit=4 a0=2e89550 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=23343 pid=23344 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201032829.579:6321): avc: denied { ioctl } for pid=23344 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201032829.579:6321): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff2a3cf980 a3=31cc1529f0 items=0 ppid=23343 pid=23344 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201032829.580:6322): avc: denied { getattr } for pid=23344 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201032829.580:6322): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=23343 pid=23344 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201032829.580:6323): avc: denied { read } for pid=23344 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201032829.580:6323): arch=c000003e syscall=2 success=yes exit=7 a0=2e93630 a1=0 a2=0 a3=3b162f5170 items=0 ppid=23343 pid=23344 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201032829.581:6324): avc: denied { read } for pid=23344 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201032829.581:6324): arch=c000003e syscall=2 success=yes exit=7 a0=2e88e20 a1=90800 a2=0 a3=9 items=0 ppid=23343 pid=23344 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201035661.394:6325): user pid=23504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201035661.394:6326): user pid=23504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201035661.395:6327): login pid=23504 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201035661.450:6328): user pid=23504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201035661.470:6329): user pid=23504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201035661.471:6330): user pid=23504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201037468.914:6331): avc: denied { getattr } for pid=23634 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201037468.914:6331): arch=c000003e syscall=6 success=yes exit=0 a0=2efc0c0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=23633 pid=23634 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201037468.914:6332): avc: denied { read } for pid=23634 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201037468.914:6332): arch=c000003e syscall=89 success=yes exit=17 a0=2efc0c0 a1=7fff8f125b20 a2=fff a3=31cc1529f0 items=0 ppid=23633 pid=23634 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201039261.484:6333): user pid=23759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201039261.485:6334): user pid=23759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201039261.485:6335): login pid=23759 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201039261.536:6336): user pid=23759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201039261.558:6337): user pid=23759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201039261.558:6338): user pid=23759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201039774.658:6339): avc: denied { getattr } for pid=23815 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201039774.658:6339): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=23814 pid=23815 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201039774.658:6340): avc: denied { search } for pid=23815 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201039774.658:6340): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=23814 pid=23815 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201039774.658:6341): avc: denied { append } for pid=23815 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201039774.658:6341): arch=c000003e syscall=2 success=yes exit=4 a0=2ededc0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=23814 pid=23815 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201039774.658:6342): avc: denied { ioctl } for pid=23815 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201039774.658:6342): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffb53ba970 a3=31cc1529f0 items=0 ppid=23814 pid=23815 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201039774.659:6343): avc: denied { getattr } for pid=23815 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201039774.659:6343): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=23814 pid=23815 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201039774.660:6344): avc: denied { read } for pid=23815 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201039774.660:6344): arch=c000003e syscall=2 success=yes exit=7 a0=2ee5e20 a1=0 a2=0 a3=3b162f5170 items=0 ppid=23814 pid=23815 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201039774.660:6345): avc: denied { read } for pid=23815 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201039774.660:6345): arch=c000003e syscall=2 success=yes exit=7 a0=2ede6e0 a1=90800 a2=0 a3=9 items=0 ppid=23814 pid=23815 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1201039988.872:6346): user pid=23253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201039988.873:6347): user pid=23253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201042801.883:6348): user pid=24017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201042801.883:6349): user pid=24017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201042801.883:6350): login pid=24017 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201042801.933:6351): user pid=24017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201042861.884:6352): user pid=24043 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201042861.884:6353): user pid=24043 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201042861.884:6354): login pid=24043 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201042861.935:6355): user pid=24043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201042861.954:6356): user pid=24043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201042861.954:6357): user pid=24043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201046461.966:6358): user pid=24289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201046461.966:6359): user pid=24289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201046461.966:6360): login pid=24289 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201046462.015:6361): user pid=24289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201046462.039:6362): user pid=24289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201046462.039:6363): user pid=24289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201047382.306:6364): avc: denied { read } for pid=24360 comm="umount" path="/proc/2182/mounts" dev=proc ino=819758 scontext=system_u:system_r:mount_t:s0 tcontext=system_u:system_r:automount_t:s0 tclass=file >type=SYSCALL msg=audit(1201047382.306:6364): arch=c000003e syscall=59 success=yes exit=0 a0=40423d30 a1=40423cd0 a2=2aaaaacfe330 a3=0 items=0 ppid=2182 pid=24360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="umount" exe="/bin/umount" subj=system_u:system_r:mount_t:s0 key=(null) >type=AVC msg=audit(1201047384.343:6365): avc: denied { getattr } for pid=29360 comm="setroubleshootd" name="mounts" dev=proc ino=819758 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:automount_t:s0 tclass=file >type=SYSCALL msg=audit(1201047384.343:6365): arch=c000003e syscall=191 success=yes exit=33 a0=caa7d4 a1=330441326b a2=d71ec0 a3=ff items=0 ppid=1 pid=29360 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201049244.990:6366): avc: denied { getattr } for pid=24474 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201049244.990:6366): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=24473 pid=24474 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201049244.990:6367): avc: denied { search } for pid=24474 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201049244.990:6367): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=24473 pid=24474 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201049244.991:6368): avc: denied { append } for pid=24474 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201049244.991:6368): arch=c000003e syscall=2 success=yes exit=4 a0=2e9dfd0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=24473 pid=24474 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201049244.991:6369): avc: denied { ioctl } for pid=24474 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201049244.991:6369): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff77c291e0 a3=31cc1529f0 items=0 ppid=24473 pid=24474 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201049244.991:6370): avc: denied { getattr } for pid=24474 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201049244.991:6370): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=24473 pid=24474 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201049244.992:6371): avc: denied { read } for pid=24474 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201049244.992:6371): arch=c000003e syscall=2 success=yes exit=7 a0=2eae880 a1=0 a2=0 a3=3b162f5170 items=0 ppid=24473 pid=24474 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201049244.993:6372): avc: denied { read } for pid=24474 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201049244.993:6372): arch=c000003e syscall=2 success=yes exit=7 a0=2e9d8f0 a1=90800 a2=0 a3=9 items=0 ppid=24473 pid=24474 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201050061.052:6373): user pid=24522 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201050061.053:6374): user pid=24522 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201050061.053:6375): login pid=24522 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201050061.107:6376): user pid=24522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201050061.127:6377): user pid=24522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201050061.127:6378): user pid=24522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201050788.810:6379): user pid=24017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201050788.810:6380): user pid=24017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201053601.821:6381): user pid=24716 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201053601.821:6382): user pid=24716 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201053601.821:6383): login pid=24716 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201053601.874:6384): user pid=24716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201053661.831:6385): user pid=24744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201053661.831:6386): user pid=24744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201053661.831:6387): login pid=24744 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201053661.879:6388): user pid=24744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201053661.897:6389): user pid=24744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201053661.898:6390): user pid=24744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201053781.369:6391): avc: denied { getattr } for pid=24780 comm="spamassassin" path="/home/phighley/.razor/identity" dev=dm-2 ino=22528024 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201053781.369:6391): arch=c000003e syscall=6 success=yes exit=0 a0=2e90220 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=24779 pid=24780 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201053781.369:6392): avc: denied { read } for pid=24780 comm="spamassassin" name="identity" dev=dm-2 ino=22528024 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201053781.369:6392): arch=c000003e syscall=89 success=yes exit=17 a0=2e90220 a1=7ffffcf48940 a2=fff a3=31cc1529f0 items=0 ppid=24779 pid=24780 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201053781.678:6393): avc: denied { write } for pid=24780 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201053781.678:6393): avc: denied { add_name } for pid=24780 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201053781.678:6393): avc: denied { create } for pid=24780 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=AVC msg=audit(1201053781.678:6393): avc: denied { write } for pid=24780 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201053781.678:6393): arch=c000003e syscall=2 success=yes exit=9 a0=2ea6e40 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=24779 pid=24780 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201053781.679:6394): avc: denied { remove_name } for pid=24780 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201053781.679:6394): avc: denied { unlink } for pid=24780 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201053781.679:6394): arch=c000003e syscall=87 success=yes exit=0 a0=2ea6e40 a1=1f34220 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=24779 pid=24780 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201057261.911:6395): user pid=24973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201057261.911:6396): user pid=24973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201057261.912:6397): login pid=24973 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201057261.963:6398): user pid=24973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201057261.982:6399): user pid=24973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201057261.983:6400): user pid=24973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201058327.687:6401): user pid=2974 uid=0 auid=1001 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201058327.692:6402): user pid=2974 uid=0 auid=1001 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201058327.700:6403): user pid=2974 uid=0 auid=1001 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1201058327.717:6404): login pid=2974 uid=0 old auid=1001 new auid=1000 >type=USER_ROLE_CHANGE msg=audit(1201058327.820:6405): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201058327.936:6406): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1201058327.937:6407): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1201058347.530:6408): user pid=25388 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201058347.532:6409): user pid=25388 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201058347.655:6410): user pid=25388 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201058347.656:6411): user pid=25388 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1201058358.608:6412): user pid=25476 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1201058358.610:6413): user pid=25476 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1201058358.687:6414): user pid=25476 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1201058358.687:6415): user pid=25476 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1201058405.376:6416): user pid=25571 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1201058405.378:6417): user pid=25571 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1201058405.435:6418): user pid=25571 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1201058405.436:6419): user pid=25571 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1201058428.212:6420): user pid=25664 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1201058428.214:6421): user pid=25664 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1201058428.269:6422): user pid=25664 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1201058428.269:6423): user pid=25664 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=AVC msg=audit(1201058627.414:6424): avc: denied { getattr } for pid=25771 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201058627.414:6424): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=25770 pid=25771 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201058627.414:6425): avc: denied { search } for pid=25771 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201058627.414:6425): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=25770 pid=25771 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201058627.414:6426): avc: denied { append } for pid=25771 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201058627.414:6426): arch=c000003e syscall=2 success=yes exit=4 a0=2e953e0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=25770 pid=25771 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201058627.414:6427): avc: denied { ioctl } for pid=25771 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201058627.414:6427): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff1dc331e0 a3=31cc1529f0 items=0 ppid=25770 pid=25771 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201058627.414:6428): avc: denied { getattr } for pid=25771 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201058627.414:6428): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=25770 pid=25771 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201058627.414:6429): avc: denied { getattr } for pid=25771 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201058627.414:6429): arch=c000003e syscall=6 success=yes exit=0 a0=2e98bb0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=25770 pid=25771 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201058627.414:6430): avc: denied { read } for pid=25771 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201058627.414:6430): arch=c000003e syscall=89 success=yes exit=17 a0=2e98bb0 a1=7fff1dc32620 a2=fff a3=31cc1529f0 items=0 ppid=25770 pid=25771 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201058627.415:6431): avc: denied { read } for pid=25771 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201058627.415:6431): arch=c000003e syscall=2 success=yes exit=7 a0=2ea0a50 a1=0 a2=0 a3=3b162f5170 items=0 ppid=25770 pid=25771 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201058627.416:6432): avc: denied { read } for pid=25771 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201058627.416:6432): arch=c000003e syscall=2 success=yes exit=7 a0=2e94d00 a1=90800 a2=0 a3=9 items=0 ppid=25770 pid=25771 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_CHAUTHTOK msg=audit(1201059539.305:6433): user pid=25937 uid=0 auid=1000 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=hsqldb exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_CHAUTHTOK msg=audit(1201059553.481:6434): user pid=26065 uid=0 auid=1000 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=clamav exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201059553.891:6435): user pid=26121 uid=0 auid=1000 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=clamav exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1201059557.633:6436): avc: denied { read } for pid=29222 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059557.633:6436): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaf0a6c50 a1=90800 a2=414d47 a3=40a000b8 items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059557.633:6437): avc: denied { getattr } for pid=29222 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201059557.633:6437): arch=c000003e syscall=4 success=yes exit=0 a0=299e740 a1=40a00050 a2=40a00050 a3=3810263f92 items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059557.633:6438): avc: denied { read } for pid=29222 comm="clamav-milter" name="daily.cvd" dev=dm-0 ino=27066428 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201059557.633:6438): arch=c000003e syscall=21 success=yes exit=0 a0=299e740 a1=4 a2=299e759 a3=414b92 items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059559.334:6439): avc: denied { search } for pid=29222 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059559.334:6439): arch=c000003e syscall=2 success=no exit=-13 a0=299e168 a1=242 a2=1fc a3=31cc1529f0 items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059559.344:6440): avc: denied { read } for pid=29222 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059559.344:6440): arch=c000003e syscall=2 success=yes exit=5 a0=328fd70 a1=90800 a2=31 a3=0 items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059559.344:6441): avc: denied { getattr } for pid=29222 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059559.344:6441): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=409ffd40 a2=409ffd40 a3=0 items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AVC msg=audit(1201059588.311:6442): user pid=2132 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=10) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201059587.988:6443): policy loaded auid=1000 >type=SYSCALL msg=audit(1201059587.988:6443): arch=c000003e syscall=1 success=yes exit=3998585 a0=4 a1=2aaaab87a000 a2=3d0379 a3=0 items=0 ppid=26162 pid=26165 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=AVC msg=audit(1201059591.456:6444): avc: denied { read } for pid=29222 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059591.456:6444): arch=c000003e syscall=2 success=yes exit=4 a0=38d3250 a1=90800 a2=414d47 a3=40a000b8 items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059591.456:6445): avc: denied { getattr } for pid=29222 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201059591.456:6445): arch=c000003e syscall=4 success=yes exit=0 a0=299dab0 a1=40a00050 a2=40a00050 a3=3810263f92 items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059591.456:6446): avc: denied { search } for pid=29222 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059591.456:6446): arch=c000003e syscall=4 success=yes exit=0 a0=299dab0 a1=40a00050 a2=40a00050 a3=3810264a2a items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059631.459:6447): avc: denied { search } for pid=29222 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059631.459:6447): arch=c000003e syscall=4 success=yes exit=0 a0=299dab0 a1=40a00050 a2=40a00050 a3=3810264a2a items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059651.459:6448): avc: denied { getattr } for pid=29222 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201059651.459:6448): arch=c000003e syscall=4 success=yes exit=0 a0=299dab0 a1=40a00050 a2=40a00050 a3=3810263f92 items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_CHAUTHTOK msg=audit(1201059684.963:6449): user pid=26377 uid=0 auid=1000 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=clamilt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201059685.198:6450): user pid=26429 uid=0 auid=1000 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=clamilt exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1201059691.459:6451): avc: denied { read } for pid=29222 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059691.459:6451): arch=c000003e syscall=2 success=yes exit=4 a0=38d3250 a1=90800 a2=414d47 a3=40a000b8 items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059701.460:6452): avc: denied { getattr } for pid=29222 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201059701.460:6452): arch=c000003e syscall=4 success=yes exit=0 a0=299f8e0 a1=40a00050 a2=40a00050 a3=3810263f92 items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059701.460:6453): avc: denied { search } for pid=29222 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059701.460:6453): arch=c000003e syscall=4 success=yes exit=0 a0=299f8e0 a1=40a00050 a2=40a00050 a3=3810264a2a items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=DAEMON_END msg=audit(1201059724.410:1288): auditd normal halt, sending auid=1000 pid=26600 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1964 >type=DAEMON_START msg=audit(1201059724.659:2302): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=1000 pid=26616 res=success >type=CONFIG_CHANGE msg=audit(1201059724.759:6456): audit_enabled=1 old=1 by auid=1000 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201059724.759:6457): audit_enabled=1 old=1 by auid=1000 res=1 >type=CONFIG_CHANGE msg=audit(1201059724.762:6458): audit_backlog_limit=320 old=320 by auid=1000 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201059724.762:6459): audit_backlog_limit=320 old=320 by auid=1000 res=1 >type=USER_ROLE_CHANGE msg=audit(1201059729.336:6460): user pid=26676 uid=0 auid=1000 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201059730.759:6461): user pid=26677 uid=0 auid=1000 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201059739.076:6462): user pid=26678 uid=0 auid=1000 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201059740.548:6463): user pid=26681 uid=0 auid=1000 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=AVC msg=audit(1201059741.460:6464): avc: denied { read } for pid=29222 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059741.460:6464): arch=c000003e syscall=2 success=yes exit=4 a0=38d3250 a1=90800 a2=414d47 a3=40a000b8 items=0 ppid=1 pid=29222 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1201059741.921:6465): user pid=26682 uid=0 auid=1000 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201059750.268:6466): user pid=26683 uid=0 auid=1000 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=AVC msg=audit(1201059756.103:6467): avc: denied { read } for pid=26721 comm="clamav-milter" name="daily.cvd" dev=dm-0 ino=27066428 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201059756.103:6467): arch=c000003e syscall=21 success=yes exit=0 a0=622d30 a1=4 a2=622d49 a3=0 items=0 ppid=26720 pid=26721 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059756.124:6468): avc: denied { getattr } for pid=26721 comm="clamav-milter" path="/var/lib/clamav/daily.cvd" dev=dm-0 ino=27066428 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201059756.124:6468): arch=c000003e syscall=5 success=yes exit=0 a0=3 a1=7fff08a97b10 a2=7fff08a97b10 a3=0 items=0 ppid=26720 pid=26721 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059757.488:6469): avc: denied { search } for pid=26721 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059757.488:6469): arch=c000003e syscall=2 success=no exit=-13 a0=625ad8 a1=242 a2=1fc a3=31cc1529f0 items=0 ppid=26720 pid=26721 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059757.594:6470): avc: denied { read } for pid=26721 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059757.594:6470): arch=c000003e syscall=2 success=yes exit=4 a0=6240e0 a1=90800 a2=31 a3=0 items=0 ppid=26720 pid=26721 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201059757.594:6471): avc: denied { getattr } for pid=26721 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201059757.594:6471): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff08a97b20 a2=7fff08a97b20 a3=0 items=0 ppid=26720 pid=26721 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201059850.073:6472): user pid=26838 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1201059850.086:6473): user pid=26838 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1201059850.186:6474): user pid=26838 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_ACQ msg=audit(1201059850.187:6475): user pid=26838 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_DISP msg=audit(1201060048.178:6476): user pid=25388 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1201060048.178:6477): user pid=25388 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201060241.320:6478): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201060241.320:6478): arch=c000003e syscall=2 success=yes exit=4 a0=5677270 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201060317.646:6479): user pid=25476 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201060317.646:6480): user pid=25476 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1201060323.725:6481): user pid=26838 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1201060323.725:6482): user pid=26838 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=AVC msg=audit(1201060770.095:6483): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201060770.095:6483): arch=c000003e syscall=4 success=yes exit=0 a0=5676c30 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201060770.095:6484): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201060770.095:6484): arch=c000003e syscall=4 success=yes exit=0 a0=5676c30 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201060862.025:6485): user pid=27015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201060862.026:6486): user pid=27015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201060862.026:6487): login pid=27015 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201060862.079:6488): user pid=27015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201060862.129:6489): user pid=27015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201060862.130:6490): user pid=27015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201061588.870:6491): user pid=24716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201061588.870:6492): user pid=24716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201062307.253:6493): avc: denied { getattr } for pid=27171 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201062307.253:6493): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=27170 pid=27171 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201062307.253:6494): avc: denied { search } for pid=27171 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201062307.253:6494): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=27170 pid=27171 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201062307.273:6495): avc: denied { append } for pid=27171 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201062307.273:6495): arch=c000003e syscall=2 success=yes exit=4 a0=2e87470 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=27170 pid=27171 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201062307.273:6496): avc: denied { ioctl } for pid=27171 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201062307.273:6496): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff2ddee3a0 a3=31cc1529f0 items=0 ppid=27170 pid=27171 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201062307.273:6497): avc: denied { getattr } for pid=27171 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201062307.273:6497): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=27170 pid=27171 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201062307.312:6498): avc: denied { getattr } for pid=27171 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201062307.312:6498): arch=c000003e syscall=6 success=yes exit=0 a0=2e8ac00 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=27170 pid=27171 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201062307.313:6499): avc: denied { read } for pid=27171 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201062307.313:6499): arch=c000003e syscall=89 success=yes exit=17 a0=2e8ac00 a1=7fff2dded7e0 a2=fff a3=31cc1529f0 items=0 ppid=27170 pid=27171 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201062307.313:6500): avc: denied { read } for pid=27171 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201062307.313:6500): arch=c000003e syscall=2 success=yes exit=7 a0=2e928f0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=27170 pid=27171 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201062307.317:6501): avc: denied { read } for pid=27171 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201062307.317:6501): arch=c000003e syscall=2 success=yes exit=7 a0=2e86d90 a1=90800 a2=0 a3=9 items=0 ppid=27170 pid=27171 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1201062665.295:6502): user pid=25664 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1201062665.296:6503): user pid=25664 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_DISP msg=audit(1201062672.245:6504): user pid=25571 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1201062672.245:6505): user pid=25571 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=AVC msg=audit(1201063383.622:6506): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201063383.622:6506): arch=c000003e syscall=2 success=yes exit=4 a0=5677270 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201063443.623:6507): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201063443.623:6507): arch=c000003e syscall=4 success=yes exit=0 a0=343bba0 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201063453.623:6508): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201063453.623:6508): arch=c000003e syscall=4 success=yes exit=0 a0=343bba0 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201064401.882:6509): user pid=27415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201064401.883:6510): user pid=27415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201064401.883:6511): login pid=27415 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201064401.936:6512): user pid=27415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201064461.882:6513): user pid=27434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201064461.882:6514): user pid=27434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201064461.882:6515): login pid=27434 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201064461.939:6516): user pid=27434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201064461.966:6517): user pid=27434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201064461.966:6518): user pid=27434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201066976.074:6519): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201066976.074:6519): arch=c000003e syscall=2 success=yes exit=4 a0=5677270 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201066986.074:6520): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201066986.074:6520): arch=c000003e syscall=4 success=yes exit=0 a0=5676c30 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201067046.075:6521): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201067046.075:6521): arch=c000003e syscall=4 success=yes exit=0 a0=5676c30 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201068061.979:6522): user pid=27995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201068061.980:6523): user pid=27995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201068061.980:6524): login pid=27995 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201068062.029:6525): user pid=27995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201068062.052:6526): user pid=27995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201068062.052:6527): user pid=27995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201068530.194:6528): avc: denied { getattr } for pid=28069 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201068530.194:6528): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=5 items=0 ppid=28068 pid=28069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201068530.194:6529): avc: denied { search } for pid=28069 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201068530.194:6529): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=28068 pid=28069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201068530.194:6530): avc: denied { append } for pid=28069 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201068530.194:6530): arch=c000003e syscall=2 success=yes exit=4 a0=31f4bd0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=28068 pid=28069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201068530.194:6531): avc: denied { ioctl } for pid=28069 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201068530.194:6531): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff0e4359f0 a3=3b162f5170 items=0 ppid=28068 pid=28069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201068530.194:6532): avc: denied { getattr } for pid=28069 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201068530.194:6532): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=3b162f5170 items=0 ppid=28068 pid=28069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201068530.195:6533): avc: denied { getattr } for pid=28069 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201068530.195:6533): arch=c000003e syscall=6 success=yes exit=0 a0=31f83a0 a1=604140 a2=604140 a3=b items=0 ppid=28068 pid=28069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201068530.195:6534): avc: denied { read } for pid=28069 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201068530.195:6534): arch=c000003e syscall=89 success=yes exit=17 a0=31f83a0 a1=7fff0e434e30 a2=fff a3=0 items=0 ppid=28068 pid=28069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201068530.201:6535): avc: denied { read } for pid=28069 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201068530.201:6535): arch=c000003e syscall=2 success=yes exit=7 a0=322dc40 a1=0 a2=0 a3=3b162f5170 items=0 ppid=28068 pid=28069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201068530.202:6536): avc: denied { read } for pid=28069 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201068530.202:6536): arch=c000003e syscall=2 success=yes exit=7 a0=3203200 a1=90800 a2=0 a3=9 items=0 ppid=28068 pid=28069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1201068766.679:6537): user pid=28140 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201068766.681:6538): user pid=28140 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201068766.740:6539): user pid=28140 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201068766.740:6540): user pid=28140 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201068830.227:6541): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201068830.227:6541): arch=c000003e syscall=2 success=yes exit=4 a0=5677270 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201068868.643:6542): user pid=28140 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1201068868.644:6543): user pid=28140 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1201068881.920:6544): user pid=28229 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct=dhighley exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1201068881.922:6545): user pid=28229 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct=dhighley exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=AVC msg=audit(1201068890.228:6546): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201068890.228:6546): arch=c000003e syscall=4 success=yes exit=0 a0=5676c30 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201068890.228:6547): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201068890.228:6547): arch=c000003e syscall=4 success=yes exit=0 a0=5676c30 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201069626.740:6548): user pid=28398 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct=dhighley exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1201069626.743:6549): user pid=28398 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct=dhighley exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=AVC msg=audit(1201069628.079:6550): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201069628.079:6550): arch=c000003e syscall=2 success=yes exit=4 a0=5677270 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_END msg=audit(1201069654.549:6551): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201069654.550:6552): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1201069658.079:6553): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201069658.079:6553): arch=c000003e syscall=4 success=yes exit=0 a0=5676c30 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201069658.079:6554): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201069658.079:6554): arch=c000003e syscall=4 success=yes exit=0 a0=5676c30 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201069729.979:6555): avc: denied { getattr } for pid=28462 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201069729.979:6555): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=28461 pid=28462 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201069729.979:6556): avc: denied { search } for pid=28462 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201069729.979:6556): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=28461 pid=28462 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201069729.979:6557): avc: denied { append } for pid=28462 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201069729.979:6557): arch=c000003e syscall=2 success=yes exit=4 a0=2f9c240 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=28461 pid=28462 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201069729.979:6558): avc: denied { ioctl } for pid=28462 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201069729.979:6558): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffcf5d5b80 a3=31cc1529f0 items=0 ppid=28461 pid=28462 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201069729.979:6559): avc: denied { getattr } for pid=28462 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201069729.979:6559): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=28461 pid=28462 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201069729.980:6560): avc: denied { getattr } for pid=28462 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201069729.980:6560): arch=c000003e syscall=6 success=yes exit=0 a0=2fa1a10 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=28461 pid=28462 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201069729.980:6561): avc: denied { read } for pid=28462 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201069729.980:6561): arch=c000003e syscall=89 success=yes exit=17 a0=2fa1a10 a1=7fffcf5d4fc0 a2=fff a3=31cc1529f0 items=0 ppid=28461 pid=28462 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201069729.981:6562): avc: denied { read } for pid=28462 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201069729.981:6562): arch=c000003e syscall=2 success=yes exit=7 a0=2fa8140 a1=0 a2=0 a3=3b162f5170 items=0 ppid=28461 pid=28462 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201069729.982:6563): avc: denied { read } for pid=28462 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201069729.982:6563): arch=c000003e syscall=2 success=yes exit=7 a0=2f9bb60 a1=90800 a2=0 a3=9 items=0 ppid=28461 pid=28462 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201070051.996:6564): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201070051.996:6564): arch=c000003e syscall=2 success=yes exit=4 a0=5677270 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201070593.046:6565): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201070593.046:6565): arch=c000003e syscall=4 success=yes exit=0 a0=5676c30 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201071059.414:6566): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201071059.414:6566): arch=c000003e syscall=4 success=yes exit=0 a0=5676c30 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201071661.066:6567): user pid=28601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201071661.067:6568): user pid=28601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201071661.067:6569): login pid=28601 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201071661.119:6570): user pid=28601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201071661.153:6571): user pid=28601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201071661.153:6572): user pid=28601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201072389.688:6573): user pid=27415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201072389.689:6574): user pid=27415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201072396.819:6575): avc: denied { read } for pid=26724 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067486 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201072396.819:6575): arch=c000003e syscall=2 success=yes exit=4 a0=5676c70 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201072398.190:6576): avc: denied { read } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201072398.190:6576): arch=c000003e syscall=2 success=yes exit=5 a0=5676ca0 a1=90800 a2=31 a3=0 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201072398.190:6577): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201072398.190:6577): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=409ffd40 a2=409ffd40 a3=0 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201073637.716:6578): avc: denied { getattr } for pid=28792 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201073637.716:6578): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=28791 pid=28792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201073637.716:6579): avc: denied { search } for pid=28792 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201073637.716:6579): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=28791 pid=28792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201073637.716:6580): avc: denied { append } for pid=28792 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201073637.716:6580): arch=c000003e syscall=2 success=yes exit=4 a0=2f49d80 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=28791 pid=28792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201073637.716:6581): avc: denied { ioctl } for pid=28792 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201073637.716:6581): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffad5b8b70 a3=31cc1529f0 items=0 ppid=28791 pid=28792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201073637.716:6582): avc: denied { getattr } for pid=28792 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201073637.716:6582): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=28791 pid=28792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201073637.717:6583): avc: denied { read } for pid=28792 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201073637.717:6583): arch=c000003e syscall=2 success=yes exit=7 a0=2f50c80 a1=0 a2=0 a3=3b162f5170 items=0 ppid=28791 pid=28792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201073637.718:6584): avc: denied { read } for pid=28792 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201073637.718:6584): arch=c000003e syscall=2 success=yes exit=7 a0=2f48650 a1=90800 a2=0 a3=9 items=0 ppid=28791 pid=28792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201075201.700:6585): user pid=28875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201075201.701:6586): user pid=28875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201075201.701:6587): login pid=28875 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201075201.751:6588): user pid=28875 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201075261.700:6589): user pid=28901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201075261.701:6590): user pid=28901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201075261.701:6591): login pid=28901 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201075261.752:6592): user pid=28901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201075261.771:6593): user pid=28901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201075261.772:6594): user pid=28901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201078861.784:6595): user pid=29128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201078861.785:6596): user pid=29128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201078861.785:6597): login pid=29128 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201078861.839:6598): user pid=29128 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201078861.859:6599): user pid=29128 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201078861.860:6600): user pid=29128 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201082461.873:6601): user pid=29390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201082461.873:6602): user pid=29390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201082461.873:6603): login pid=29390 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201082461.926:6604): user pid=29390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201082461.946:6605): user pid=29390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201082461.946:6606): user pid=29390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201083188.680:6607): user pid=28875 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201083188.680:6608): user pid=28875 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201086001.691:6609): user pid=29701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201086001.691:6610): user pid=29701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201086001.691:6611): login pid=29701 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201086001.743:6612): user pid=29701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201086061.691:6613): user pid=29726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201086061.692:6614): user pid=29726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201086061.692:6615): login pid=29726 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201086061.743:6616): user pid=29726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201086061.763:6617): user pid=29726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201086061.764:6618): user pid=29726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201089234.667:6619): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201089234.667:6619): arch=c000003e syscall=2 success=yes exit=4 a0=a86ffc0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1201089257.775:6620): auid=1000 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=30015 comm="mythfilldatabas" sig=11 >type=USER_ACCT msg=audit(1201089661.775:6621): user pid=30062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201089661.776:6622): user pid=30062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201089661.776:6623): login pid=30062 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201089661.827:6624): user pid=30062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201089661.849:6625): user pid=30062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201089661.850:6626): user pid=30062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201089662.416:6627): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201089662.416:6627): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000fc0 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201089721.855:6628): user pid=30091 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201089721.855:6629): user pid=30091 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201089721.855:6630): login pid=30091 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201089721.907:6631): user pid=30091 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201092187.922:6632): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201092187.922:6632): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000fc0 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201092614.117:6633): avc: denied { append } for pid=30336 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201092614.117:6633): arch=c000003e syscall=2 success=yes exit=4 a0=2ee7990 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=30335 pid=30336 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201092614.117:6634): avc: denied { ioctl } for pid=30336 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201092614.117:6634): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffc5c4c200 a3=31cc1529f0 items=0 ppid=30335 pid=30336 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201092614.117:6635): avc: denied { getattr } for pid=30336 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201092614.117:6635): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=30335 pid=30336 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201092614.118:6636): avc: denied { read } for pid=30336 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201092614.118:6636): arch=c000003e syscall=2 success=yes exit=7 a0=2eef770 a1=0 a2=0 a3=3b162f5170 items=0 ppid=30335 pid=30336 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201092792.656:6637): avc: denied { getattr } for pid=30360 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201092792.656:6637): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=30359 pid=30360 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201092792.656:6638): avc: denied { search } for pid=30360 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201092792.656:6638): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=30359 pid=30360 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201092792.658:6639): avc: denied { read } for pid=30360 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201092792.658:6639): arch=c000003e syscall=2 success=yes exit=7 a0=2f05520 a1=90800 a2=0 a3=9 items=0 ppid=30359 pid=30360 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201093139.364:6640): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201093139.364:6640): arch=c000003e syscall=2 success=yes exit=4 a0=a86ffc0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201093149.364:6641): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201093149.364:6641): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000fc0 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201093157.816:6642): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201093157.816:6642): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000fc0 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201093159.125:6643): avc: denied { getattr } for pid=807 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201093159.125:6643): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=806 pid=807 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201093159.125:6644): avc: denied { search } for pid=807 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201093159.125:6644): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=806 pid=807 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201093159.125:6645): avc: denied { append } for pid=807 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201093159.125:6645): arch=c000003e syscall=2 success=yes exit=4 a0=2febcb0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=806 pid=807 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201093159.126:6646): avc: denied { ioctl } for pid=807 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201093159.126:6646): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff5b956f10 a3=31cc1529f0 items=0 ppid=806 pid=807 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201093159.126:6647): avc: denied { getattr } for pid=807 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201093159.126:6647): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=806 pid=807 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201093159.126:6648): avc: denied { getattr } for pid=807 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201093159.126:6648): arch=c000003e syscall=6 success=yes exit=0 a0=2ff0480 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=806 pid=807 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201093159.126:6649): avc: denied { read } for pid=807 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201093159.126:6649): arch=c000003e syscall=89 success=yes exit=17 a0=2ff0480 a1=7fff5b956350 a2=fff a3=31cc1529f0 items=0 ppid=806 pid=807 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201093159.127:6650): avc: denied { read } for pid=807 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201093159.127:6650): arch=c000003e syscall=2 success=yes exit=7 a0=2ff3e60 a1=0 a2=0 a3=3b162f5170 items=0 ppid=806 pid=807 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201093159.128:6651): avc: denied { read } for pid=807 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201093159.128:6651): arch=c000003e syscall=2 success=yes exit=7 a0=2feb5d0 a1=90800 a2=0 a3=9 items=0 ppid=806 pid=807 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1201093202.578:6652): user pid=30091 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201093202.578:6653): user pid=30091 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201093261.585:6654): user pid=1520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201093261.586:6655): user pid=1520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201093261.586:6656): login pid=1520 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201093261.638:6657): user pid=1520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201093261.659:6658): user pid=1520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201093261.660:6659): user pid=1520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201093786.300:6660): avc: denied { getattr } for pid=1588 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201093786.300:6660): arch=c000003e syscall=6 success=yes exit=0 a0=2e866e0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=1587 pid=1588 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201093786.300:6661): avc: denied { read } for pid=1588 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201093786.300:6661): arch=c000003e syscall=89 success=yes exit=17 a0=2e866e0 a1=7fff495fdff0 a2=fff a3=31cc1529f0 items=0 ppid=1587 pid=1588 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1201093989.026:6662): user pid=29701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201093989.026:6663): user pid=29701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201093998.004:6664): avc: denied { read } for pid=26724 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067485 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201093998.004:6664): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaac000fc0 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201093999.351:6665): avc: denied { read } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201093999.351:6665): arch=c000003e syscall=2 success=yes exit=6 a0=2aaaac001030 a1=90800 a2=35 a3=0 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201093999.351:6666): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201093999.351:6666): arch=c000003e syscall=5 success=yes exit=0 a0=6 a1=409ffd40 a2=409ffd40 a3=0 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201095783.518:6667): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201095783.518:6667): arch=c000003e syscall=2 success=yes exit=4 a0=2aaab0917590 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201096025.404:6668): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201096025.404:6668): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000c10 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201096801.037:6669): user pid=1839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201096801.038:6670): user pid=1839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201096801.038:6671): login pid=1839 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201096801.089:6672): user pid=1839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201096804.016:6673): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201096804.016:6673): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000c10 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201096861.036:6674): user pid=1855 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201096861.037:6675): user pid=1855 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201096861.037:6676): login pid=1855 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201096861.091:6677): user pid=1855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201096861.113:6678): user pid=1855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201096861.113:6679): user pid=1855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201098635.643:6680): user pid=2002 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201098635.646:6681): user pid=2002 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201098635.672:6682): user pid=2002 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1201098635.718:6683): login pid=2002 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201098635.718:6684): user pid=2002 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201098635.725:6685): user pid=2016 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=CRED_REFR msg=audit(1201098635.734:6686): user pid=2016 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1201098640.911:6687): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201098640.911:6687): arch=c000003e syscall=2 success=yes exit=5 a0=2aaab0917590 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201098845.255:6688): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201098845.255:6688): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000c10 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201098845.255:6689): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201098845.255:6689): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000c10 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201098845.535:6690): avc: denied { getattr } for pid=2093 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201098845.535:6690): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=2092 pid=2093 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201098845.535:6691): avc: denied { search } for pid=2093 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201098845.535:6691): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=2092 pid=2093 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201098845.535:6692): avc: denied { append } for pid=2093 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201098845.535:6692): arch=c000003e syscall=2 success=yes exit=4 a0=2edca20 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=2092 pid=2093 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201098845.535:6693): avc: denied { ioctl } for pid=2093 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201098845.535:6693): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff0e4249e0 a3=31cc1529f0 items=0 ppid=2092 pid=2093 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201098845.535:6694): avc: denied { getattr } for pid=2093 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201098845.535:6694): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=2092 pid=2093 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201098845.536:6695): avc: denied { getattr } for pid=2093 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201098845.536:6695): arch=c000003e syscall=6 success=yes exit=0 a0=2ee11f0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=2092 pid=2093 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201098845.536:6696): avc: denied { read } for pid=2093 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201098845.536:6696): arch=c000003e syscall=89 success=yes exit=17 a0=2ee11f0 a1=7fff0e423e20 a2=fff a3=31cc1529f0 items=0 ppid=2092 pid=2093 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201098845.537:6697): avc: denied { read } for pid=2093 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201098845.537:6697): arch=c000003e syscall=2 success=yes exit=7 a0=2ef0e90 a1=0 a2=0 a3=3b162f5170 items=0 ppid=2092 pid=2093 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201098845.537:6698): avc: denied { read } for pid=2093 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201098845.537:6698): arch=c000003e syscall=2 success=yes exit=7 a0=2edc340 a1=90800 a2=0 a3=9 items=0 ppid=2092 pid=2093 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1201099303.405:6699): user pid=2002 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1201099303.405:6700): user pid=2002 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_AUTH msg=audit(1201099370.591:6701): user pid=2172 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201099370.595:6702): user pid=2172 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201099370.614:6703): user pid=2172 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1201099370.660:6704): login pid=2172 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201099370.660:6705): user pid=2172 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201099370.662:6706): user pid=2190 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=CRED_REFR msg=audit(1201099370.671:6707): user pid=2190 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1201099380.398:6708): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201099380.398:6708): arch=c000003e syscall=2 success=yes exit=5 a0=2aaab0917590 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201099380.398:6709): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201099380.398:6709): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000c10 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201099380.398:6710): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201099380.398:6710): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000c10 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201099531.184:6711): user pid=2172 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1201099531.184:6712): user pid=2172 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201099536.727:6713): user pid=2260 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201099536.738:6714): user pid=2260 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1201099536.755:6715): login pid=2260 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1201099536.755:6716): user pid=2260 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201099536.764:6717): user pid=2266 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201099536.781:6718): user pid=2260 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=AVC msg=audit(1201099551.135:6719): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201099551.135:6719): arch=c000003e syscall=2 success=yes exit=4 a0=2aaab0917590 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201099584.694:6720): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201099584.694:6720): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000c10 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201099584.694:6721): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201099584.694:6721): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000c10 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201099585.847:6722): avc: denied { getattr } for pid=2320 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201099585.847:6722): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=2319 pid=2320 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201099585.848:6723): avc: denied { search } for pid=2320 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201099585.848:6723): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=2319 pid=2320 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201099585.848:6724): avc: denied { append } for pid=2320 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201099585.848:6724): arch=c000003e syscall=2 success=yes exit=4 a0=2ef2770 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=2319 pid=2320 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201099585.848:6725): avc: denied { ioctl } for pid=2320 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201099585.848:6725): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7ffffcdef3a0 a3=31cc1529f0 items=0 ppid=2319 pid=2320 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201099585.848:6726): avc: denied { getattr } for pid=2320 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201099585.848:6726): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=2319 pid=2320 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201099585.848:6727): avc: denied { getattr } for pid=2320 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201099585.848:6727): arch=c000003e syscall=6 success=yes exit=0 a0=2ef5f40 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=2319 pid=2320 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201099585.848:6728): avc: denied { read } for pid=2320 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201099585.848:6728): arch=c000003e syscall=89 success=yes exit=17 a0=2ef5f40 a1=7ffffcdee7e0 a2=fff a3=31cc1529f0 items=0 ppid=2319 pid=2320 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201099585.849:6729): avc: denied { read } for pid=2320 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201099585.849:6729): arch=c000003e syscall=2 success=yes exit=7 a0=2efa970 a1=0 a2=0 a3=3b162f5170 items=0 ppid=2319 pid=2320 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201099585.850:6730): avc: denied { read } for pid=2320 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201099585.850:6730): arch=c000003e syscall=2 success=yes exit=7 a0=2ef2090 a1=90800 a2=0 a3=9 items=0 ppid=2319 pid=2320 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1201099603.146:6731): user pid=2260 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1201099603.146:6732): user pid=2260 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201100461.129:6733): user pid=2365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201100461.129:6734): user pid=2365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201100461.129:6735): login pid=2365 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201100461.184:6736): user pid=2365 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201100461.206:6737): user pid=2365 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201100461.207:6738): user pid=2365 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201101703.612:6739): avc: denied { getattr } for pid=2515 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201101703.612:6739): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=2514 pid=2515 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201101703.612:6740): avc: denied { search } for pid=2515 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201101703.612:6740): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=2514 pid=2515 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201101703.612:6741): avc: denied { append } for pid=2515 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201101703.612:6741): arch=c000003e syscall=2 success=yes exit=4 a0=2f95df0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=2514 pid=2515 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201101703.612:6742): avc: denied { ioctl } for pid=2515 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201101703.612:6742): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff76b90140 a3=31cc1529f0 items=0 ppid=2514 pid=2515 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201101703.612:6743): avc: denied { getattr } for pid=2515 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201101703.612:6743): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=2514 pid=2515 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201101703.613:6744): avc: denied { read } for pid=2515 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201101703.613:6744): arch=c000003e syscall=2 success=yes exit=7 a0=2f9ef80 a1=0 a2=0 a3=3b162f5170 items=0 ppid=2514 pid=2515 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201101703.614:6745): avc: denied { read } for pid=2515 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201101703.614:6745): arch=c000003e syscall=2 success=yes exit=7 a0=2f956c0 a1=90800 a2=0 a3=9 items=0 ppid=2514 pid=2515 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201104054.281:6746): avc: denied { getattr } for pid=2744 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201104054.281:6746): arch=c000003e syscall=6 success=yes exit=0 a0=301d620 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=2743 pid=2744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201104054.281:6747): avc: denied { read } for pid=2744 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201104054.281:6747): arch=c000003e syscall=89 success=yes exit=17 a0=301d620 a1=7fffddbdc5d0 a2=fff a3=31cc1529f0 items=0 ppid=2743 pid=2744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201104061.218:6748): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201104061.219:6749): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201104061.219:6750): login pid=2745 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201104061.273:6751): user pid=2745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201104061.295:6752): user pid=2745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201104061.296:6753): user pid=2745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201104787.187:6754): user pid=1839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201104787.187:6755): user pid=1839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201106898.506:6756): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201106898.506:6756): arch=c000003e syscall=2 success=yes exit=5 a0=2aaab0917590 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201107601.199:6757): user pid=3026 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201107601.200:6758): user pid=3026 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201107601.200:6759): login pid=3026 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201107601.253:6760): user pid=3026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201107661.199:6761): user pid=3042 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201107661.200:6762): user pid=3042 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201107661.200:6763): login pid=3042 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201107661.251:6764): user pid=3042 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201107661.272:6765): user pid=3042 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201107661.272:6766): user pid=3042 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201110422.862:6767): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201110422.862:6767): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000c10 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201110576.706:6768): avc: denied { getattr } for pid=3278 comm="spamassassin" path="/home/phighley/.razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201110576.706:6768): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=3277 pid=3278 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201110576.706:6769): avc: denied { search } for pid=3278 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201110576.706:6769): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=3277 pid=3278 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201110576.706:6770): avc: denied { append } for pid=3278 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=22528031 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201110576.706:6770): arch=c000003e syscall=2 success=yes exit=4 a0=30b4830 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=3277 pid=3278 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201110576.706:6771): avc: denied { ioctl } for pid=3278 comm="spamassassin" path="/home/phighley/.razor/razor-agent.log" dev=dm-2 ino=22528031 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201110576.706:6771): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff7a79cd50 a3=31cc1529f0 items=0 ppid=3277 pid=3278 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201110576.706:6772): avc: denied { getattr } for pid=3278 comm="spamassassin" path="/home/phighley/.razor/razor-agent.log" dev=dm-2 ino=22528031 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201110576.706:6772): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=3277 pid=3278 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201110576.708:6773): avc: denied { read } for pid=3278 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=22528030 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201110576.708:6773): arch=c000003e syscall=2 success=yes exit=7 a0=30cbd40 a1=0 a2=0 a3=3b162f5170 items=0 ppid=3277 pid=3278 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201110576.709:6774): avc: denied { read } for pid=3278 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201110576.709:6774): arch=c000003e syscall=2 success=yes exit=7 a0=30b4150 a1=90800 a2=0 a3=9 items=0 ppid=3277 pid=3278 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201111261.286:6775): user pid=3322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201111261.287:6776): user pid=3322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201111261.287:6777): login pid=3322 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201111261.339:6778): user pid=3322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201111261.363:6779): user pid=3322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201111261.363:6780): user pid=3322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201114861.374:6781): user pid=3588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201114861.375:6782): user pid=3588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201114861.375:6783): login pid=3588 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201114861.427:6784): user pid=3588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201114861.448:6785): user pid=3588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201114861.448:6786): user pid=3588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201114865.644:6787): avc: denied { getattr } for pid=3612 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201114865.644:6787): arch=c000003e syscall=6 success=yes exit=0 a0=2eec0d0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=3611 pid=3612 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201114865.644:6788): avc: denied { read } for pid=3612 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201114865.644:6788): arch=c000003e syscall=89 success=yes exit=17 a0=2eec0d0 a1=7fff19abc4b0 a2=fff a3=31cc1529f0 items=0 ppid=3611 pid=3612 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1201115587.361:6789): user pid=3026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201115587.361:6790): user pid=3026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201118401.372:6791): user pid=3944 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201118401.373:6792): user pid=3944 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201118401.373:6793): login pid=3944 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201118401.425:6794): user pid=3944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201118428.739:6795): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201118428.739:6795): arch=c000003e syscall=2 success=yes exit=5 a0=2aaab0917590 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201118461.373:6796): user pid=3970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201118461.374:6797): user pid=3970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201118461.374:6798): login pid=3970 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201118461.424:6799): user pid=3970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201118461.445:6800): user pid=3970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201118461.446:6801): user pid=3970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201120988.435:6802): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201120988.435:6802): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000c10 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201120988.435:6803): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201120988.435:6803): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000c10 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201122061.459:6804): user pid=4250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201122061.459:6805): user pid=4250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201122061.459:6806): login pid=4250 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201122061.514:6807): user pid=4250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201122061.539:6808): user pid=4250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201122061.539:6809): user pid=4250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201122250.256:6810): avc: denied { getattr } for pid=4283 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201122250.256:6810): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=4282 pid=4283 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201122250.256:6811): avc: denied { search } for pid=4283 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201122250.256:6811): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=4282 pid=4283 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201122250.256:6812): avc: denied { append } for pid=4283 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201122250.256:6812): arch=c000003e syscall=2 success=yes exit=4 a0=2f299d0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=4282 pid=4283 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201122250.256:6813): avc: denied { ioctl } for pid=4283 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201122250.256:6813): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff73ebd470 a3=31cc1529f0 items=0 ppid=4282 pid=4283 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201122250.256:6814): avc: denied { getattr } for pid=4283 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201122250.256:6814): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=4282 pid=4283 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201122250.257:6815): avc: denied { read } for pid=4283 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201122250.257:6815): arch=c000003e syscall=2 success=yes exit=7 a0=2f331b0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=4282 pid=4283 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201122250.258:6816): avc: denied { read } for pid=4283 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201122250.258:6816): arch=c000003e syscall=2 success=yes exit=7 a0=2f292a0 a1=90800 a2=0 a3=9 items=0 ppid=4282 pid=4283 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201125661.552:6817): user pid=4497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201125661.552:6818): user pid=4497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201125661.553:6819): login pid=4497 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201125661.606:6820): user pid=4497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201125661.626:6821): user pid=4497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201125661.626:6822): user pid=4497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201126388.140:6823): user pid=3944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201126388.140:6824): user pid=3944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201126394.568:6825): avc: denied { read } for pid=26724 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067479 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201126394.568:6825): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaac000c50 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201126395.912:6826): avc: denied { read } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201126395.912:6826): arch=c000003e syscall=2 success=yes exit=5 a0=2aaaac002330 a1=90800 a2=35 a3=0 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201126395.912:6827): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201126395.912:6827): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=409ffd40 a2=409ffd40 a3=0 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201127286.163:6828): avc: denied { getattr } for pid=4625 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201127286.163:6828): arch=c000003e syscall=6 success=yes exit=0 a0=2fcc080 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=4624 pid=4625 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201127286.164:6829): avc: denied { read } for pid=4625 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201127286.164:6829): arch=c000003e syscall=89 success=yes exit=17 a0=2fcc080 a1=7fff7ce3f830 a2=fff a3=31cc1529f0 items=0 ppid=4624 pid=4625 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201129201.152:6830): user pid=4736 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201129201.153:6831): user pid=4736 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201129201.153:6832): login pid=4736 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201129201.207:6833): user pid=4736 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201129261.152:6834): user pid=4754 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201129261.153:6835): user pid=4754 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201129261.153:6836): login pid=4754 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201129261.203:6837): user pid=4754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201129261.221:6838): user pid=4754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201129261.222:6839): user pid=4754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201132861.234:6840): user pid=4974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201132861.234:6841): user pid=4974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201132861.234:6842): login pid=4974 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201132861.284:6843): user pid=4974 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201132861.303:6844): user pid=4974 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201132861.304:6845): user pid=4974 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201133846.312:6846): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201133846.312:6846): arch=c000003e syscall=2 success=yes exit=4 a0=2aaab663eab0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201136061.924:6847): avc: denied { write } for pid=5215 comm="spamassassin" name="server.c301.cloudmark.com.conf" dev=dm-2 ino=120127858 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201136061.924:6847): arch=c000003e syscall=2 success=yes exit=22 a0=3700090 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=5214 pid=5215 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201136062.161:6848): avc: denied { write } for pid=5215 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201136062.161:6848): avc: denied { add_name } for pid=5215 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201136062.161:6848): avc: denied { create } for pid=5215 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201136062.161:6848): arch=c000003e syscall=2 success=yes exit=23 a0=3720300 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=5214 pid=5215 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201136062.175:6849): avc: denied { remove_name } for pid=5215 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127853 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201136062.175:6849): avc: denied { unlink } for pid=5215 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127853 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201136062.175:6849): arch=c000003e syscall=87 success=yes exit=0 a0=3720300 a1=21660b0 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=5214 pid=5215 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201136461.316:6850): user pid=5237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201136461.316:6851): user pid=5237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201136461.316:6852): login pid=5237 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201136461.370:6853): user pid=5237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201136461.392:6854): user pid=5237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201136461.392:6855): user pid=5237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201136468.755:6856): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201136468.755:6856): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000e50 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201136468.755:6857): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201136468.755:6857): arch=c000003e syscall=4 success=yes exit=0 a0=2aaab131d770 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201137187.441:6858): user pid=4736 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201137187.442:6859): user pid=4736 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201138778.314:6860): avc: denied { getattr } for pid=5379 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201138778.314:6860): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=5378 pid=5379 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201138778.315:6861): avc: denied { search } for pid=5379 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201138778.315:6861): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=5378 pid=5379 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201138778.315:6862): avc: denied { append } for pid=5379 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201138778.315:6862): arch=c000003e syscall=2 success=yes exit=4 a0=2fa20d0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=5378 pid=5379 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201138778.315:6863): avc: denied { ioctl } for pid=5379 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201138778.315:6863): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff1b294840 a3=31cc1529f0 items=0 ppid=5378 pid=5379 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201138778.315:6864): avc: denied { getattr } for pid=5379 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201138778.315:6864): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=5378 pid=5379 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201138778.316:6865): avc: denied { read } for pid=5379 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201138778.316:6865): arch=c000003e syscall=2 success=yes exit=7 a0=2fb29f0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=5378 pid=5379 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201138778.317:6866): avc: denied { read } for pid=5379 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201138778.317:6866): arch=c000003e syscall=2 success=yes exit=7 a0=2fa19a0 a1=90800 a2=0 a3=9 items=0 ppid=5378 pid=5379 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201140001.452:6867): user pid=5449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201140001.452:6868): user pid=5449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201140001.452:6869): login pid=5449 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201140001.501:6870): user pid=5449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201140061.453:6871): user pid=5467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201140061.453:6872): user pid=5467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201140061.453:6873): login pid=5467 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201140061.505:6874): user pid=5467 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201140061.526:6875): user pid=5467 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201140061.526:6876): user pid=5467 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201141463.989:6877): avc: denied { write } for pid=5566 comm="spamassassin" name="server.c303.cloudmark.com.conf" dev=dm-2 ino=120127861 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201141463.989:6877): arch=c000003e syscall=2 success=yes exit=9 a0=2f19960 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=5565 pid=5566 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201141464.253:6878): avc: denied { write } for pid=5566 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201141464.253:6878): avc: denied { add_name } for pid=5566 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201141464.253:6878): avc: denied { create } for pid=5566 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201141464.253:6878): arch=c000003e syscall=2 success=yes exit=10 a0=2f1e870 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=5565 pid=5566 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201141464.253:6879): avc: denied { remove_name } for pid=5566 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127853 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201141464.253:6879): avc: denied { unlink } for pid=5566 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127853 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201141464.253:6879): arch=c000003e syscall=87 success=yes exit=0 a0=2f16800 a1=1f36240 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=5565 pid=5566 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201142829.238:6880): avc: denied { getattr } for pid=5658 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201142829.238:6880): arch=c000003e syscall=6 success=yes exit=0 a0=2ea7cf0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=5657 pid=5658 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201142829.238:6881): avc: denied { read } for pid=5658 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201142829.238:6881): arch=c000003e syscall=89 success=yes exit=17 a0=2ea7cf0 a1=7fff0beb08a0 a2=fff a3=31cc1529f0 items=0 ppid=5657 pid=5658 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201143661.540:6882): user pid=5725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201143661.540:6883): user pid=5725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201143661.540:6884): login pid=5725 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201143661.593:6885): user pid=5725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201143661.615:6886): user pid=5725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201143661.615:6887): user pid=5725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201147261.629:6888): user pid=5954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201147261.629:6889): user pid=5954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201147261.629:6890): login pid=5954 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201147261.683:6891): user pid=5954 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201147261.703:6892): user pid=5954 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201147261.704:6893): user pid=5954 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201147988.244:6894): user pid=5449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201147988.244:6895): user pid=5449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201147989.220:6896): avc: denied { read } for pid=26724 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067485 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201147989.220:6896): arch=c000003e syscall=2 success=yes exit=4 a0=2aaab131d7b0 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201147990.532:6897): avc: denied { read } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201147990.532:6897): arch=c000003e syscall=2 success=yes exit=5 a0=2aaab131d7e0 a1=90800 a2=35 a3=0 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201147990.532:6898): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201147990.532:6898): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=409ffd40 a2=409ffd40 a3=0 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201148441.767:6899): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201148441.767:6899): arch=c000003e syscall=2 success=yes exit=4 a0=2aaab1460ca0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1201148454.717:6900): auid=1000 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=6056 comm="mythfilldatabas" sig=11 >type=AVC msg=audit(1201148743.528:6901): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201148743.528:6901): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000d40 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201148870.517:6902): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201148870.517:6902): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac002240 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201149973.063:6903): avc: denied { getattr } for pid=6176 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201149973.063:6903): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=6175 pid=6176 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201149973.063:6904): avc: denied { search } for pid=6176 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201149973.063:6904): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=6175 pid=6176 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201149973.063:6905): avc: denied { append } for pid=6176 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201149973.063:6905): arch=c000003e syscall=2 success=yes exit=4 a0=2e702e0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=6175 pid=6176 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201149973.064:6906): avc: denied { ioctl } for pid=6176 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201149973.064:6906): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff4cb48100 a3=31cc1529f0 items=0 ppid=6175 pid=6176 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201149973.064:6907): avc: denied { getattr } for pid=6176 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201149973.064:6907): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=6175 pid=6176 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201149973.065:6908): avc: denied { read } for pid=6176 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201149973.065:6908): arch=c000003e syscall=2 success=yes exit=7 a0=2e79d20 a1=0 a2=0 a3=3b162f5170 items=0 ppid=6175 pid=6176 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201149973.065:6909): avc: denied { read } for pid=6176 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201149973.065:6909): arch=c000003e syscall=2 success=yes exit=7 a0=2e6fc00 a1=90800 a2=0 a3=9 items=0 ppid=6175 pid=6176 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201150801.257:6910): user pid=6244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201150801.257:6911): user pid=6244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201150801.257:6912): login pid=6244 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201150801.311:6913): user pid=6244 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201150861.257:6914): user pid=6269 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201150861.257:6915): user pid=6269 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201150861.257:6916): login pid=6269 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201150861.308:6917): user pid=6269 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201150861.329:6918): user pid=6269 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201150861.329:6919): user pid=6269 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201150948.521:6920): avc: denied { write } for pid=6309 comm="spamassassin" name="server.c302.cloudmark.com.conf" dev=dm-2 ino=120127856 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201150948.521:6920): arch=c000003e syscall=2 success=yes exit=9 a0=2f1a8f0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=6308 pid=6309 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201150948.697:6921): avc: denied { write } for pid=6309 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201150948.697:6921): avc: denied { add_name } for pid=6309 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201150948.697:6921): avc: denied { create } for pid=6309 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201150948.697:6921): arch=c000003e syscall=2 success=yes exit=10 a0=2f1e6c0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=6308 pid=6309 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201150948.697:6922): avc: denied { remove_name } for pid=6309 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127853 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201150948.697:6922): avc: denied { unlink } for pid=6309 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127853 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201150948.697:6922): arch=c000003e syscall=87 success=yes exit=0 a0=2f1e240 a1=1f362a0 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=6308 pid=6309 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1201151973.387:6923): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1201151973.388:6924): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1201151980.258:6925): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201151980.263:6926): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201151980.271:6927): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1201151980.285:6928): login pid=2974 uid=0 old auid=1000 new auid=1000 >type=USER_ROLE_CHANGE msg=audit(1201151980.315:6929): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201151980.363:6930): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1201151980.363:6931): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=AVC msg=audit(1201151983.148:6932): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201151983.148:6932): arch=c000003e syscall=2 success=yes exit=4 a0=2aaab1460ca0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201151983.148:6933): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201151983.148:6933): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac002240 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201151983.148:6934): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201151983.148:6934): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac002240 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201152051.333:6935): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201152051.333:6935): arch=c000003e syscall=2 success=yes exit=4 a0=2aaab1460ca0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201152054.107:6936): user pid=6737 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct=dhighley exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1201152054.110:6937): user pid=6737 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct=dhighley exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=AVC msg=audit(1201152055.139:6938): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201152055.139:6938): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac002240 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201152055.139:6939): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201152055.139:6939): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac002240 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201152178.333:6940): user pid=6764 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct=dhighley exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1201152178.336:6941): user pid=6764 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct=dhighley exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1201152539.773:6942): user pid=6944 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201152539.776:6943): user pid=6944 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201152539.835:6944): user pid=6944 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201152539.835:6945): user pid=6944 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201152591.471:6946): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201152591.471:6946): arch=c000003e syscall=2 success=yes exit=4 a0=2aaab1460ca0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201152591.472:6947): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201152591.472:6947): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000ea0 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201152591.472:6948): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201152591.472:6948): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000ea0 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201152737.662:6949): avc: denied { getattr } for pid=7068 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201152737.662:6949): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7067 pid=7068 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152737.662:6950): avc: denied { search } for pid=7068 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201152737.662:6950): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7067 pid=7068 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152737.663:6951): avc: denied { append } for pid=7068 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201152737.663:6951): arch=c000003e syscall=2 success=yes exit=4 a0=2e85f30 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=7067 pid=7068 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152737.663:6952): avc: denied { ioctl } for pid=7068 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201152737.663:6952): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff93ab9070 a3=31cc1529f0 items=0 ppid=7067 pid=7068 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152737.663:6953): avc: denied { getattr } for pid=7068 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201152737.663:6953): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=7067 pid=7068 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152737.663:6954): avc: denied { getattr } for pid=7068 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201152737.663:6954): arch=c000003e syscall=6 success=yes exit=0 a0=2e896c0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7067 pid=7068 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152737.663:6955): avc: denied { read } for pid=7068 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201152737.663:6955): arch=c000003e syscall=89 success=yes exit=17 a0=2e896c0 a1=7fff93ab84b0 a2=fff a3=31cc1529f0 items=0 ppid=7067 pid=7068 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152737.664:6956): avc: denied { read } for pid=7068 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201152737.664:6956): arch=c000003e syscall=2 success=yes exit=7 a0=2e8d6d0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=7067 pid=7068 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152737.665:6957): avc: denied { read } for pid=7068 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201152737.665:6957): arch=c000003e syscall=2 success=yes exit=7 a0=2e84850 a1=90800 a2=0 a3=9 items=0 ppid=7067 pid=7068 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152875.246:6958): avc: denied { getattr } for pid=7100 comm="spamassassin" path="/home/phighley/.razor/identity" dev=dm-2 ino=22528024 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201152875.246:6958): arch=c000003e syscall=6 success=yes exit=0 a0=2e7db70 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7099 pid=7100 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152875.247:6959): avc: denied { read } for pid=7100 comm="spamassassin" name="identity" dev=dm-2 ino=22528024 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201152875.247:6959): arch=c000003e syscall=89 success=yes exit=17 a0=2e7db70 a1=7fff02b7c570 a2=fff a3=31cc1529f0 items=0 ppid=7099 pid=7100 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152875.736:6960): avc: denied { write } for pid=7100 comm="spamassassin" name="server.c304.cloudmark.com.conf" dev=dm-2 ino=22528038 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201152875.736:6960): arch=c000003e syscall=2 success=yes exit=9 a0=2eaca00 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=7099 pid=7100 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152875.955:6961): avc: denied { write } for pid=7100 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201152875.955:6961): avc: denied { add_name } for pid=7100 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201152875.955:6961): avc: denied { create } for pid=7100 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201152875.955:6961): arch=c000003e syscall=2 success=yes exit=10 a0=2eb07d0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=7099 pid=7100 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152875.955:6962): avc: denied { remove_name } for pid=7100 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201152875.955:6962): avc: denied { unlink } for pid=7100 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201152875.955:6962): arch=c000003e syscall=87 success=yes exit=0 a0=2eb0690 a1=1f359e0 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=7099 pid=7100 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201152884.283:6963): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201152884.283:6963): arch=c000003e syscall=2 success=yes exit=4 a0=2aaab1460ca0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201152944.283:6964): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201152944.283:6964): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac002240 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201152944.283:6965): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201152944.283:6965): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac002240 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201153053.288:6966): avc: denied { associate } for pid=7156 comm="restorecon" name="/" dev=rpc_pipefs ino=7582 scontext=system_u:object_r:user_home_t:s0 tcontext=system_u:object_r:rpc_pipefs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1201153053.288:6966): arch=c000003e syscall=189 success=yes exit=0 a0=7fffa8b59b40 a1=2aaaaaee026b a2=2aaaac6abeb0 a3=21 items=0 ppid=6957 pid=7156 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0 key=(null) >type=AVC msg=audit(1201153054.218:6967): avc: denied { search } for pid=7158 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201153054.218:6967): avc: denied { search } for pid=7158 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201153054.218:6967): avc: denied { read write } for pid=7158 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153054.218:6967): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=7158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201153054.218:6968): avc: denied { lock } for pid=7158 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153054.218:6968): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=7158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201153054.247:6969): avc: denied { read } for pid=7158 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153054.247:6969): arch=c000003e syscall=2 success=yes exit=5 a0=403ed2 a1=0 a2=1b6 a3=0 items=0 ppid=2694 pid=7158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201153054.247:6970): avc: denied { getattr } for pid=7158 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153054.247:6970): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7ffff6fdb6f0 a2=7ffff6fdb6f0 a3=0 items=0 ppid=2694 pid=7158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201153054.248:6971): avc: denied { write } for pid=7158 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201153054.248:6971): avc: denied { add_name } for pid=7158 comm="hal-acl-tool" name="acl-list.SNHK5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201153054.248:6971): avc: denied { create } for pid=7158 comm="hal-acl-tool" name="acl-list.SNHK5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201153054.248:6971): avc: denied { read write } for pid=7158 comm="hal-acl-tool" name="acl-list.SNHK5T" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201153054.248:6971): arch=c000003e syscall=2 success=yes exit=5 a0=615070 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2694 pid=7158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201153054.248:6972): avc: denied { getattr } for pid=7158 comm="hal-acl-tool" path="/var/lib/hal/acl-list.SNHK5T" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201153054.248:6972): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7ffff6fdba10 a2=7ffff6fdba10 a3=31cc1529f0 items=0 ppid=2694 pid=7158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201153054.248:6973): avc: denied { remove_name } for pid=7158 comm="hal-acl-tool" name="acl-list.SNHK5T" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201153054.248:6973): avc: denied { rename } for pid=7158 comm="hal-acl-tool" name="acl-list.SNHK5T" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201153054.248:6973): avc: denied { unlink } for pid=7158 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153054.248:6973): arch=c000003e syscall=82 success=yes exit=0 a0=613380 a1=403ed2 a2=31 a3=31cc1529f0 items=0 ppid=2694 pid=7158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201153054.248:6974): avc: denied { lock } for pid=7158 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153054.248:6974): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=8 a2=613b50 a3=31cc1529f0 items=0 ppid=2694 pid=7158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201153054.285:6975): avc: denied { search } for pid=26724 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201153054.285:6975): arch=c000003e syscall=2 success=yes exit=4 a0=2aaab1460ca0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201153056.289:6976): avc: denied { write } for pid=7040 comm="setroubleshootd" name="rpm" dev=dm-0 ino=26968067 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201153056.289:6976): arch=c000003e syscall=21 success=yes exit=0 a0=ac6f20 a1=2 a2=0 a3=0 items=0 ppid=1 pid=7040 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201153056.289:6977): avc: denied { read write } for pid=7040 comm="setroubleshootd" name="__db.001" dev=dm-0 ino=26968215 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153056.289:6977): arch=c000003e syscall=2 success=yes exit=12 a0=b6b500 a1=2 a2=0 a3=31cc1529f0 items=0 ppid=1 pid=7040 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201153083.522:6978): avc: denied { setattr } for pid=7194 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153083.522:6978): arch=c000003e syscall=90 success=yes exit=0 a0=7c8860 a1=180 a2=31db561958 a3=6e657473696c5f74 items=0 ppid=1 pid=7194 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201153084.285:6979): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201153084.285:6979): arch=c000003e syscall=2 success=yes exit=4 a0=2aaab1460ca0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201153084.285:6980): avc: denied { getattr } for pid=26724 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153084.285:6980): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac002240 a1=40a00050 a2=40a00050 a3=2aaaaab43dc2 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201153084.285:6981): avc: denied { search } for pid=26724 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201153084.285:6981): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac002240 a1=40a00050 a2=40a00050 a3=2aaaaab44662 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201153086.289:6982): avc: denied { lock } for pid=7196 comm="setroubleshootd" path="/var/lib/rpm/Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153086.289:6982): arch=c000003e syscall=72 success=yes exit=0 a0=b a1=6 a2=409fec80 a3=b items=0 ppid=1 pid=7196 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201153124.286:6983): avc: denied { search } for pid=26724 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201153124.286:6983): arch=c000003e syscall=2 success=yes exit=4 a0=2aaab1460ca0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201153148.695:6984): avc: denied { setattr } for pid=7243 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153148.695:6984): arch=c000003e syscall=90 success=yes exit=0 a0=7c8860 a1=180 a2=31db561958 a3=6e657473696c5f74 items=0 ppid=1 pid=7243 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201153148.696:6985): avc: denied { read } for pid=7243 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153148.696:6985): arch=c000003e syscall=2 success=yes exit=5 a0=2aaab35fcef4 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=7243 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201153182.051:6986): avc: denied { write } for pid=7243 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153182.051:6986): arch=c000003e syscall=2 success=yes exit=11 a0=9782c0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=7243 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201153426.744:6987): user pid=7315 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1201153426.756:6988): user pid=7315 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1201153426.840:6989): user pid=7315 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1201153426.840:6990): user pid=7315 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1201153504.198:6991): avc: denied { read } for pid=26724 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201153504.198:6991): arch=c000003e syscall=2 success=yes exit=5 a0=2aaab1460ca0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201153508.723:6992): user pid=7371 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201153508.723:6993): user pid=7371 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201153508.728:6994): user pid=7371 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_STATUS msg=audit(1201153550.393:6995): enforcing=1 old_enforcing=0 auid=1000 >type=USER_AVC msg=audit(1201153550.396:6996): user pid=2132 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=SYSCALL msg=audit(1201153550.393:6995): arch=c000003e syscall=1 success=yes exit=1 a0=e a1=7fff4f077c60 a2=1 a3=3304413322 items=0 ppid=7371 pid=7379 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="/usr/share/syst" exe="/usr/bin/python" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=AVC msg=audit(1201153554.199:6997): avc: denied { search } for pid=26724 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201153554.199:6997): arch=c000003e syscall=2 success=no exit=-13 a0=2aaab1460ca0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=26724 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_END msg=audit(1201153555.410:6998): user pid=7371 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1201153564.670:6999): user pid=7315 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201153564.672:7000): user pid=7315 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1201153571.062:7001): user pid=6944 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1201153571.062:7002): user pid=6944 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201153594.892:7003): avc: denied { write } for pid=6042 comm="mysqld" path="/var/lib/mysql/mythconverg/housekeeping.MYD" dev=dm-0 ino=27067326 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153594.892:7003): arch=c000003e syscall=18 success=no exit=-13 a0=40 a1=4528f680 a2=14 a3=1c items=0 ppid=2346 pid=6042 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153594.901:7004): avc: denied { write } for pid=6042 comm="mysqld" path="/var/lib/mysql/mythconverg/housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153594.901:7004): arch=c000003e syscall=18 success=no exit=-13 a0=3f a1=1787370 a2=400 a3=400 items=0 ppid=2346 pid=6042 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153594.901:7005): avc: denied { write } for pid=6042 comm="mysqld" path="/var/lib/mysql/mythconverg/housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153594.901:7005): arch=c000003e syscall=18 success=no exit=-13 a0=3f a1=4528e390 a2=8c a3=0 items=0 ppid=2346 pid=6042 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153594.901:7006): avc: denied { write } for pid=6042 comm="mysqld" path="/var/lib/mysql/mythconverg/housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153594.901:7006): arch=c000003e syscall=18 success=no exit=-13 a0=3f a1=4528e5d0 a2=8c a3=0 items=0 ppid=2346 pid=6042 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153708.487:7007): avc: denied { search } for pid=7445 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201153708.487:7007): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=7445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=USER_END msg=audit(1201153708.503:7008): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201153708.503:7009): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1201153721.550:7010): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201153721.556:7011): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201153721.564:7012): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1201153721.580:7013): login pid=2974 uid=0 old auid=1000 new auid=1000 >type=USER_ROLE_CHANGE msg=audit(1201153721.600:7014): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201153721.613:7015): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1201153721.613:7016): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1201153721.632:7017): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:consolekit_t:s0 pid=2551 comm="console-kit-dae" sig=6 >type=AVC msg=audit(1201153721.640:7018): avc: denied { search } for pid=7487 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201153721.640:7018): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=7487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201153731.615:7019): avc: denied { write } for pid=7727 comm="mysqld" path="/var/lib/mysql/mythconverg/mythweb_sessions.MYD" dev=dm-0 ino=27067939 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153731.615:7019): arch=c000003e syscall=18 success=no exit=-13 a0=7b a1=1d12345 a2=3c a3=dfa8 items=0 ppid=2346 pid=7727 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153731.616:7020): avc: denied { write } for pid=7727 comm="mysqld" path="/var/lib/mysql/mythconverg/mythweb_sessions.MYI" dev=dm-0 ino=27067936 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153731.616:7020): arch=c000003e syscall=18 success=no exit=-13 a0=47 a1=182c370 a2=400 a3=400 items=0 ppid=2346 pid=7727 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153731.616:7021): avc: denied { write } for pid=7727 comm="mysqld" path="/var/lib/mysql/mythconverg/mythweb_sessions.MYI" dev=dm-0 ino=27067936 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153731.616:7021): arch=c000003e syscall=18 success=no exit=-13 a0=47 a1=1832f70 a2=400 a3=800 items=0 ppid=2346 pid=7727 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153731.616:7022): avc: denied { write } for pid=7727 comm="mysqld" path="/var/lib/mysql/mythconverg/mythweb_sessions.MYI" dev=dm-0 ino=27067936 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153731.616:7022): arch=c000003e syscall=18 success=no exit=-13 a0=47 a1=453105d0 a2=94 a3=0 items=0 ppid=2346 pid=7727 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_AUTH msg=audit(1201153746.903:7023): user pid=7767 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201153746.906:7024): user pid=7767 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201153746.964:7025): user pid=7767 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201153746.964:7026): user pid=7767 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1201153826.899:7027): user pid=7883 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201153826.899:7028): user pid=7883 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201153826.904:7029): user pid=7883 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_STATUS msg=audit(1201153837.902:7030): enforcing=0 old_enforcing=1 auid=1000 >type=USER_AVC msg=audit(1201153837.902:7031): user pid=2132 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=SYSCALL msg=audit(1201153837.902:7030): arch=c000003e syscall=1 success=yes exit=1 a0=e a1=7fff0a1cc820 a2=1 a3=3304413322 items=0 ppid=7883 pid=7888 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="/usr/share/syst" exe="/usr/bin/python" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_END msg=audit(1201153841.099:7032): user pid=7883 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201153901.903:7033): avc: denied { write } for pid=6042 comm="mysqld" path="/var/lib/mysql/mythconverg/housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153901.903:7033): arch=c000003e syscall=18 success=yes exit=140 a0=3f a1=4528e5d0 a2=8c a3=0 items=0 ppid=2346 pid=6042 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_AUTH msg=audit(1201153932.285:7034): user pid=7902 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201153932.285:7035): user pid=7902 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201153932.290:7036): user pid=7902 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_STATUS msg=audit(1201153941.644:7037): enforcing=1 old_enforcing=0 auid=1000 >type=USER_AVC msg=audit(1201153941.647:7038): user pid=2132 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=SYSCALL msg=audit(1201153941.644:7037): arch=c000003e syscall=1 success=yes exit=1 a0=e a1=7fff3ed853e0 a2=1 a3=3304413322 items=0 ppid=7902 pid=7905 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="/usr/share/syst" exe="/usr/bin/python" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_END msg=audit(1201153944.652:7039): user pid=7902 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1201153950.707:7040): user pid=7767 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1201153950.708:7041): user pid=7767 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1201153957.081:7042): auid=1000 uid=1000 gid=1000 subj=system_u:system_r:unconfined_t:s0 pid=7574 comm="pulseaudio" sig=6 >type=USER_END msg=audit(1201153957.158:7043): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201153957.158:7044): user pid=2974 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1201153966.477:7045): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2897 comm="gdm-binary" sig=11 >type=AVC msg=audit(1201153970.247:7046): avc: denied { write } for pid=8205 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201153970.247:7046): arch=c000003e syscall=87 success=no exit=-13 a0=7fffb0cf1ed8 a1=0 a2=2 a3=45250008 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7047): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/people.MYI" dev=dm-0 ino=27067358 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7047): arch=c000003e syscall=18 success=no exit=-13 a0=57 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7048): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/capturecard.MYI" dev=dm-0 ino=27067433 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7048): arch=c000003e syscall=18 success=no exit=-13 a0=25 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7049): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/cardinput.MYI" dev=dm-0 ino=27067409 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7049): arch=c000003e syscall=18 success=no exit=-13 a0=27 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7050): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/recordmatch.MYI" dev=dm-0 ino=27067403 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7050): arch=c000003e syscall=18 success=no exit=-13 a0=35 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7051): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/mythweb_sessions.MYI" dev=dm-0 ino=27067936 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7051): arch=c000003e syscall=18 success=no exit=-13 a0=47 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7052): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/mythweb_sessions.MYI" dev=dm-0 ino=27067936 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7052): arch=c000003e syscall=18 success=no exit=-13 a0=47 a1=4524ebc0 a2=94 a3=0 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7053): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/recordedprogram.MYI" dev=dm-0 ino=27067370 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7053): arch=c000003e syscall=18 success=no exit=-13 a0=5c a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7054): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/recordedrating.MYI" dev=dm-0 ino=27067337 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7054): arch=c000003e syscall=18 success=no exit=-13 a0=5e a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7055): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/recordedcredits.MYI" dev=dm-0 ino=27067388 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7055): arch=c000003e syscall=18 success=no exit=-13 a0=5a a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7056): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/recordedmarkup.MYI" dev=dm-0 ino=27067430 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7056): arch=c000003e syscall=18 success=no exit=-13 a0=46 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7057): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/recordedseek.MYI" dev=dm-0 ino=27067373 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7057): arch=c000003e syscall=18 success=no exit=-13 a0=29 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7058): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/oldprogram.MYI" dev=dm-0 ino=27067352 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7058): arch=c000003e syscall=18 success=no exit=-13 a0=6b a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.272:7059): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/program.MYI" dev=dm-0 ino=27067307 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.272:7059): arch=c000003e syscall=18 success=no exit=-13 a0=37 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.274:7060): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/programrating.MYI" dev=dm-0 ino=27067397 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.274:7060): arch=c000003e syscall=18 success=no exit=-13 a0=53 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.274:7061): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/programgenres.MYI" dev=dm-0 ino=27067424 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.274:7061): arch=c000003e syscall=18 success=no exit=-13 a0=6d a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.274:7062): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/credits.MYI" dev=dm-0 ino=27067313 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.274:7062): arch=c000003e syscall=18 success=no exit=-13 a0=55 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.274:7063): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/record.MYI" dev=dm-0 ino=27067451 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.274:7063): arch=c000003e syscall=18 success=no exit=-13 a0=22 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.274:7064): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/settings.MYI" dev=dm-0 ino=27067406 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.274:7064): arch=c000003e syscall=18 success=no exit=-13 a0=1a a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.274:7065): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/oldrecorded.MYI" dev=dm-0 ino=27067355 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.274:7065): arch=c000003e syscall=18 success=no exit=-13 a0=31 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.275:7066): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.275:7066): arch=c000003e syscall=18 success=no exit=-13 a0=3f a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.275:7067): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.275:7067): arch=c000003e syscall=18 success=no exit=-13 a0=3f a1=4524ebc0 a2=8c a3=0 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.275:7068): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/jobqueue.MYI" dev=dm-0 ino=27067391 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.275:7068): arch=c000003e syscall=18 success=no exit=-13 a0=2f a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.275:7069): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/inuseprograms.MYI" dev=dm-0 ino=27067301 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.275:7069): arch=c000003e syscall=18 success=no exit=-13 a0=1c a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.275:7070): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/channel.MYI" dev=dm-0 ino=27067331 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.275:7070): arch=c000003e syscall=18 success=no exit=-13 a0=20 a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153970.275:7071): avc: denied { write } for pid=8205 comm="mysqld" path="/var/lib/mysql/mythconverg/recorded.MYI" dev=dm-0 ino=27067439 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153970.275:7071): arch=c000003e syscall=18 success=no exit=-13 a0=1e a1=4524fee0 a2=2 a3=18 items=0 ppid=2346 pid=8205 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153972.299:7072): avc: denied { write } for pid=2410 comm="mysqld" path="/var/lib/mysql/ib_logfile0" dev=dm-0 ino=27001760 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153972.299:7072): arch=c000003e syscall=18 success=no exit=-13 a0=8 a1=2aaaaafd4a00 a2=200 a3=600 items=0 ppid=2346 pid=2410 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153972.639:7073): avc: denied { write } for pid=8223 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201153972.639:7073): arch=c000003e syscall=2 success=no exit=-13 a0=7fff7f56b470 a1=42 a2=1b6 a3=7fff7f56a8bb items=0 ppid=2346 pid=8223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153972.639:7074): avc: denied { write } for pid=8223 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201153972.639:7074): arch=c000003e syscall=2 success=no exit=-13 a0=7fff7f56b470 a1=42 a2=1b6 a3=7fff7f56a8bb items=0 ppid=2346 pid=8223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201153972.727:7075): avc: denied { write } for pid=8223 comm="mysqld" name="ibdata1" dev=dm-0 ino=27001759 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201153972.727:7075): arch=c000003e syscall=2 success=no exit=-13 a0=7fff7f568890 a1=2 a2=0 a3=8f6b92 items=0 ppid=2346 pid=8223 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=DAEMON_END msg=audit(1201153976.647:2303): auditd normal halt, sending auid=4294967295 pid=8283 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201154328.801:6433): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2162 res=success >type=CONFIG_CHANGE msg=audit(1201154328.901:7): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201154328.901:8): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201154328.945:9): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201154328.945:10): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AVC msg=audit(1201154329.487:11): user pid=2178 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1201154329.963:12): avc: denied { setattr } for pid=2190 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154329.963:12): arch=c000003e syscall=90 success=no exit=-13 a0=80c690 a1=180 a2=31db561958 a3=6e657473696c5f74 items=0 ppid=1 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154329.965:13): avc: denied { setattr } for pid=2190 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154329.965:13): arch=c000003e syscall=92 success=no exit=-13 a0=9487f0 a1=0 a2=0 a3=6e657473696c5f74 items=0 ppid=1 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154329.966:14): avc: denied { read } for pid=2190 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154329.966:14): arch=c000003e syscall=2 success=no exit=-13 a0=2aaab33f1ef4 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154329.966:15): avc: denied { read } for pid=2190 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154329.966:15): arch=c000003e syscall=2 success=no exit=-13 a0=92bd80 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154329.966:16): avc: denied { read } for pid=2190 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154329.966:16): arch=c000003e syscall=2 success=no exit=-13 a0=2aaab33f1ef4 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154329.966:17): avc: denied { read } for pid=2190 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154329.966:17): arch=c000003e syscall=2 success=no exit=-13 a0=9473c0 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154330.258:18): avc: denied { search } for pid=2287 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154330.258:18): arch=c000003e syscall=2 success=no exit=-13 a0=2aaaaadad990 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201154331.392:19): avc: denied { write } for pid=2462 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154331.392:19): arch=c000003e syscall=2 success=no exit=-13 a0=7fffc562b780 a1=42 a2=1b6 a3=7fffc562abcb items=0 ppid=2405 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201154331.393:20): avc: denied { write } for pid=2462 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154331.393:20): arch=c000003e syscall=2 success=no exit=-13 a0=7fffc562b780 a1=42 a2=1b6 a3=7fffc562abcb items=0 ppid=2405 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201154331.483:21): avc: denied { write } for pid=2462 comm="mysqld" name="ibdata1" dev=dm-0 ino=27001759 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154331.483:21): arch=c000003e syscall=2 success=no exit=-13 a0=7fffc5628ba0 a1=2 a2=0 a3=8f6b92 items=0 ppid=2405 pid=2462 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201154333.485:22): avc: denied { write } for pid=2268 comm="setroubleshootd" name="rpm" dev=dm-0 ino=26968067 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154333.485:22): arch=c000003e syscall=21 success=no exit=-13 a0=971770 a1=2 a2=0 a3=0 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.485:23): avc: denied { read } for pid=2268 comm="setroubleshootd" name="Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154333.485:23): arch=c000003e syscall=2 success=no exit=-13 a0=9c9db0 a1=0 a2=0 a3=1a4 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.485:24): avc: denied { read } for pid=2268 comm="setroubleshootd" name="Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154333.485:24): arch=c000003e syscall=2 success=no exit=-13 a0=9c9db0 a1=0 a2=0 a3=1a4 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.486:25): avc: denied { read } for pid=2268 comm="setroubleshootd" name="Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154333.486:25): arch=c000003e syscall=2 success=no exit=-13 a0=9c9db0 a1=0 a2=0 a3=1a4 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.543:26): avc: denied { write } for pid=2268 comm="setroubleshootd" name="rpm" dev=dm-0 ino=26968067 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154333.543:26): arch=c000003e syscall=21 success=no exit=-13 a0=a0d3d0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.543:27): avc: denied { read } for pid=2268 comm="setroubleshootd" name="Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154333.543:27): arch=c000003e syscall=2 success=no exit=-13 a0=993fd0 a1=0 a2=0 a3=1a4 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.543:28): avc: denied { read } for pid=2268 comm="setroubleshootd" name="Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154333.543:28): arch=c000003e syscall=2 success=no exit=-13 a0=993fd0 a1=0 a2=0 a3=1a4 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.543:29): avc: denied { read } for pid=2268 comm="setroubleshootd" name="Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154333.543:29): arch=c000003e syscall=2 success=no exit=-13 a0=993fd0 a1=0 a2=0 a3=1a4 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.546:30): avc: denied { write } for pid=2268 comm="setroubleshootd" name="rpm" dev=dm-0 ino=26968067 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154333.546:30): arch=c000003e syscall=21 success=no exit=-13 a0=a1ce10 a1=2 a2=0 a3=0 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.546:31): avc: denied { read } for pid=2268 comm="setroubleshootd" name="Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154333.546:31): arch=c000003e syscall=2 success=no exit=-13 a0=9908e0 a1=0 a2=0 a3=1a4 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.546:32): avc: denied { read } for pid=2268 comm="setroubleshootd" name="Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154333.546:32): arch=c000003e syscall=2 success=no exit=-13 a0=9908e0 a1=0 a2=0 a3=1a4 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.546:33): avc: denied { read } for pid=2268 comm="setroubleshootd" name="Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154333.546:33): arch=c000003e syscall=2 success=no exit=-13 a0=9908e0 a1=0 a2=0 a3=1a4 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.548:34): avc: denied { write } for pid=2268 comm="setroubleshootd" name="rpm" dev=dm-0 ino=26968067 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154333.548:34): arch=c000003e syscall=21 success=no exit=-13 a0=9b4f70 a1=2 a2=0 a3=0 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.548:35): avc: denied { read } for pid=2268 comm="setroubleshootd" name="Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154333.548:35): arch=c000003e syscall=2 success=no exit=-13 a0=99cf50 a1=0 a2=0 a3=1a4 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.548:36): avc: denied { read } for pid=2268 comm="setroubleshootd" name="Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154333.548:36): arch=c000003e syscall=2 success=no exit=-13 a0=99cf50 a1=0 a2=0 a3=1a4 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154333.548:37): avc: denied { read } for pid=2268 comm="setroubleshootd" name="Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154333.548:37): arch=c000003e syscall=2 success=no exit=-13 a0=99cf50 a1=0 a2=0 a3=1a4 items=0 ppid=1 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201154362.943:38): avc: denied { search } for pid=2654 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154362.943:38): arch=c000003e syscall=21 success=no exit=-13 a0=820d30 a1=4 a2=820d49 a3=415012 items=0 ppid=2653 pid=2654 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201154362.943:39): avc: denied { search } for pid=2654 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154362.943:39): arch=c000003e syscall=2 success=no exit=-13 a0=820d30 a1=0 a2=1b6 a3=0 items=0 ppid=2653 pid=2654 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201154362.944:40): avc: denied { search } for pid=2654 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154362.944:40): arch=c000003e syscall=4 success=no exit=-13 a0=81fb80 a1=7fff2dfc3150 a2=7fff2dfc3150 a3=416002 items=0 ppid=2653 pid=2654 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201154363.203:41): avc: denied { getattr } for pid=2646 comm="spamd" path="/root/.razor/identity" dev=dm-0 ino=26346206 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201154363.203:41): arch=c000003e syscall=6 success=no exit=-13 a0=2f20d80 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=1 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201154366.035:42): user pid=2849 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Cups-PDF uri=cups-pdf:/ banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201154366.046:43): user pid=2849 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=pineneedle uri=hp:/net/Officejet_7300_series?ip=10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)' >type=AVC msg=audit(1201154366.433:44): avc: denied { search } for pid=2880 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.433:44): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.433:45): avc: denied { search } for pid=2881 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.433:45): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.436:46): avc: denied { search } for pid=2882 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.436:46): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.439:47): avc: denied { search } for pid=2884 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.439:47): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.441:48): avc: denied { search } for pid=2885 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.441:48): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.486:49): avc: denied { search } for pid=2889 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.486:49): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.495:50): avc: denied { search } for pid=2892 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.495:50): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.498:51): avc: denied { search } for pid=2893 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.498:51): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.501:52): avc: denied { search } for pid=2894 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.501:52): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.504:53): avc: denied { search } for pid=2895 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.504:53): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.507:54): avc: denied { search } for pid=2896 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.507:54): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.511:55): avc: denied { search } for pid=2897 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.511:55): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.514:56): avc: denied { search } for pid=2898 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.514:56): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.517:57): avc: denied { search } for pid=2899 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.517:57): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.520:58): avc: denied { search } for pid=2900 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.520:58): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.523:59): avc: denied { search } for pid=2901 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.523:59): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.527:60): avc: denied { search } for pid=2902 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.527:60): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.530:61): avc: denied { search } for pid=2903 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.530:61): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.533:62): avc: denied { search } for pid=2904 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.533:62): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.536:63): avc: denied { search } for pid=2905 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.536:63): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.539:64): avc: denied { search } for pid=2906 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.539:64): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.542:65): avc: denied { search } for pid=2907 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.542:65): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.546:66): avc: denied { search } for pid=2908 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.546:66): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.549:67): avc: denied { search } for pid=2909 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.549:67): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.551:68): avc: denied { search } for pid=2910 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.551:68): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.555:69): avc: denied { search } for pid=2911 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.555:69): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.558:70): avc: denied { search } for pid=2912 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.558:70): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.561:71): avc: denied { search } for pid=2913 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.561:71): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.564:72): avc: denied { search } for pid=2914 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.564:72): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.566:73): avc: denied { search } for pid=2915 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.566:73): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.599:74): avc: denied { search } for pid=2920 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.599:74): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.602:75): avc: denied { search } for pid=2921 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.602:75): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.605:76): avc: denied { search } for pid=2922 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.605:76): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.609:77): avc: denied { search } for pid=2923 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.609:77): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.612:78): avc: denied { search } for pid=2924 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.612:78): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.615:79): avc: denied { search } for pid=2925 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.615:79): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.618:80): avc: denied { search } for pid=2926 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.618:80): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.621:81): avc: denied { search } for pid=2927 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.621:81): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.625:82): avc: denied { search } for pid=2928 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.625:82): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.628:83): avc: denied { search } for pid=2929 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.628:83): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.631:84): avc: denied { search } for pid=2930 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.631:84): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.635:85): avc: denied { search } for pid=2931 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.635:85): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.800:86): avc: denied { search } for pid=2944 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.800:86): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201154366.832:87): avc: denied { search } for pid=2949 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154366.832:87): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=2949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=USER_AUTH msg=audit(1201154410.372:88): user pid=3050 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201154410.378:89): user pid=3050 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201154410.382:90): user pid=3050 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1201154410.397:91): login pid=3050 uid=0 old auid=4294967295 new auid=1000 >type=USER_ROLE_CHANGE msg=audit(1201154410.418:92): user pid=3050 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201154410.441:93): user pid=3050 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1201154410.442:94): user pid=3050 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1201154410.503:95): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:consolekit_t:s0 pid=2734 comm="console-kit-dae" sig=6 >type=AVC msg=audit(1201154410.507:96): avc: denied { search } for pid=3093 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154410.507:96): arch=c000003e syscall=2 success=no exit=-13 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2859 pid=3093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=USER_AUTH msg=audit(1201154461.322:97): user pid=3351 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1201154461.324:98): user pid=3351 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1201154461.385:99): user pid=3351 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1201154461.385:100): user pid=3351 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1201154461.728:101): user pid=3409 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201154461.729:102): user pid=3409 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201154461.729:103): login pid=3409 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201154461.761:104): user pid=3409 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201154461.810:105): user pid=3409 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201154461.810:106): user pid=3409 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201154485.300:107): avc: denied { write } for pid=3563 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154485.300:107): arch=c000003e syscall=2 success=no exit=-13 a0=7fff73c2f150 a1=42 a2=1b6 a3=7fff73c2e59b items=0 ppid=3503 pid=3563 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201154485.300:108): avc: denied { write } for pid=3563 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154485.300:108): arch=c000003e syscall=2 success=no exit=-13 a0=7fff73c2f150 a1=42 a2=1b6 a3=7fff73c2e59b items=0 ppid=3503 pid=3563 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201154485.322:109): avc: denied { write } for pid=3563 comm="mysqld" name="ibdata1" dev=dm-0 ino=27001759 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201154485.322:109): arch=c000003e syscall=2 success=no exit=-13 a0=7fff73c2c570 a1=2 a2=0 a3=8f6b92 items=0 ppid=3503 pid=3563 auid=1000 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=pts0 comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_AUTH msg=audit(1201154507.084:110): user pid=3699 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201154507.086:111): user pid=3699 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201154507.127:112): user pid=3699 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201154507.127:113): user pid=3699 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201154625.782:114): avc: denied { search } for pid=3883 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154625.782:114): arch=c000003e syscall=21 success=no exit=-13 a0=820d30 a1=4 a2=820d49 a3=415012 items=0 ppid=3882 pid=3883 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201154625.782:115): avc: denied { search } for pid=3883 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154625.782:115): arch=c000003e syscall=2 success=no exit=-13 a0=820d30 a1=0 a2=1b6 a3=0 items=0 ppid=3882 pid=3883 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201154625.783:116): avc: denied { search } for pid=3883 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201154625.783:116): arch=c000003e syscall=4 success=no exit=-13 a0=81fb80 a1=7fff6276aef0 a2=7fff6276aef0 a3=416002 items=0 ppid=3882 pid=3883 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201155036.768:117): user pid=3957 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201155036.768:118): user pid=3957 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201155036.788:119): user pid=3957 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_CONFIG_CHANGE msg=audit(1201155223.988:120): bool=spamassassin_can_network val=1 old_val=0 auid=1000 >type=SYSCALL msg=audit(1201155223.988:120): arch=c000003e syscall=1 success=yes exit=2 a0=6 a1=7fff4e709f70 a2=2 a3=2aaaab116082 items=0 ppid=3974 pid=3975 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0 key=(null) >type=USER_AVC msg=audit(1201155223.992:121): user pid=2178 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1201155224.028:122): avc: denied { search } for pid=3975 comm="setsebool" name="export" dev=dm-0 ino=18219009 scontext=system_u:system_r:setsebool_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1201155224.028:122): arch=c000003e syscall=4 success=no exit=-13 a0=2aaaab33f186 a1=7fff4e710e60 a2=7fff4e710e60 a3=2aaaaadcd8eb items=0 ppid=3974 pid=3975 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0 key=(null) >type=USER_END msg=audit(1201155271.567:123): user pid=3957 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201155726.905:124): user pid=4083 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201155726.905:125): user pid=4083 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201155726.913:126): user pid=4083 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_STATUS msg=audit(1201155739.964:127): enforcing=0 old_enforcing=1 auid=1000 >type=USER_AVC msg=audit(1201155739.964:128): user pid=2178 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=SYSCALL msg=audit(1201155739.964:127): arch=c000003e syscall=1 success=yes exit=1 a0=e a1=7fff912488a0 a2=1 a3=3304413322 items=0 ppid=4083 pid=4088 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="/usr/share/syst" exe="/usr/bin/python" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_END msg=audit(1201155742.777:129): user pid=4083 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201155753.952:130): avc: denied { write } for pid=4186 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201155753.952:130): avc: denied { add_name } for pid=4186 comm="mysqld" name="douglas.lower-test" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201155753.952:130): avc: denied { create } for pid=4186 comm="mysqld" name="douglas.lower-test" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201155753.952:130): avc: denied { read write } for pid=4186 comm="mysqld" name="douglas.lower-test" dev=dm-0 ino=27001779 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201155753.952:130): arch=c000003e syscall=2 success=yes exit=3 a0=7ffffb938e60 a1=42 a2=1b6 a3=7ffffb9382ab items=0 ppid=4126 pid=4186 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201155753.952:131): avc: denied { remove_name } for pid=4186 comm="mysqld" name="douglas.lower-test" dev=dm-0 ino=27001779 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201155753.952:131): avc: denied { unlink } for pid=4186 comm="mysqld" name="douglas.lower-test" dev=dm-0 ino=27001779 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201155753.952:131): arch=c000003e syscall=87 success=yes exit=0 a0=7ffffb938e60 a1=10 a2=31ccc16260 a3=7365742d7265776f items=0 ppid=4126 pid=4186 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201155754.003:132): avc: denied { write } for pid=4186 comm="mysqld" name="ibdata1" dev=dm-0 ino=27001759 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201155754.003:132): arch=c000003e syscall=2 success=yes exit=3 a0=7ffffb936280 a1=2 a2=0 a3=8f6b92 items=0 ppid=4126 pid=4186 auid=1000 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=pts0 comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201155754.061:133): avc: denied { read } for pid=4186 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201155754.061:133): arch=c000003e syscall=2 success=yes exit=10 a0=8a9ff9 a1=90800 a2=31cc152950 a3=92db9a items=0 ppid=4126 pid=4186 auid=1000 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=pts0 comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201155754.452:134): avc: denied { create } for pid=4186 comm="mysqld" name="mysql.sock" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201155754.452:134): arch=c000003e syscall=49 success=yes exit=0 a0=c a1=7ffffb939490 a2=6e a3=7ffffb939488 items=0 ppid=4126 pid=4186 auid=1000 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=pts0 comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201155758.416:135): avc: denied { write } for pid=4211 comm="mysqld" name="recordmatch.MYI" dev=dm-0 ino=27067403 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201155758.416:135): arch=c000003e syscall=2 success=yes exit=54 a0=45189a40 a1=2 a2=0 a3=4517f30b items=0 ppid=4126 pid=4211 auid=1000 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=pts0 comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201155759.256:136): avc: denied { getattr } for pid=4211 comm="mysqld" path="/var/lib/mysql/#sql_105a_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201155759.256:136): arch=c000003e syscall=6 success=yes exit=0 a0=45180a50 a1=451808f0 a2=451808f0 a3=45180a5b items=0 ppid=4126 pid=4211 auid=1000 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=pts0 comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201155778.318:137): avc: denied { setattr } for pid=4238 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201155778.318:137): arch=c000003e syscall=90 success=yes exit=0 a0=7c8860 a1=180 a2=31db561958 a3=6e657473696c5f74 items=0 ppid=1 pid=4238 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201155778.325:138): avc: denied { read } for pid=4238 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201155778.325:138): arch=c000003e syscall=2 success=yes exit=5 a0=2aaab35fcef4 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=4238 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201155813.295:139): avc: denied { search } for pid=4262 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201155813.295:139): arch=c000003e syscall=21 success=no exit=-2 a0=820d30 a1=4 a2=820d49 a3=415012 items=0 ppid=4261 pid=4262 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts0 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201155813.295:140): avc: denied { search } for pid=4262 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1201155813.295:140): avc: denied { read } for pid=4262 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067485 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201155813.295:140): arch=c000003e syscall=2 success=yes exit=3 a0=820d30 a1=0 a2=1b6 a3=0 items=0 ppid=4261 pid=4262 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts0 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201155813.295:141): avc: denied { getattr } for pid=4262 comm="clamav-milter" path="/var/lib/clamav/daily.inc/daily.info" dev=dm-0 ino=27067485 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201155813.295:141): arch=c000003e syscall=5 success=yes exit=0 a0=3 a1=7fffa42ae790 a2=7fffa42ae790 a3=0 items=0 ppid=4261 pid=4262 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts0 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201155813.307:142): avc: denied { read } for pid=4262 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201155813.307:142): arch=c000003e syscall=2 success=yes exit=3 a0=81fb80 a1=90800 a2=31 a3=3fe326d70a items=0 ppid=4261 pid=4262 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts0 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201155814.990:143): avc: denied { read } for pid=4262 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201155814.990:143): arch=c000003e syscall=2 success=yes exit=4 a0=820da0 a1=90800 a2=31 a3=0 items=0 ppid=4261 pid=4262 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts0 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201155814.990:144): avc: denied { getattr } for pid=4262 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201155814.990:144): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffa42ae7a0 a2=7fffa42ae7a0 a3=0 items=0 ppid=4261 pid=4262 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts0 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201155817.014:145): avc: denied { write } for pid=4240 comm="setroubleshootd" name="rpm" dev=dm-0 ino=26968067 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201155817.014:145): arch=c000003e syscall=21 success=yes exit=0 a0=80c5c0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=4240 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201155817.014:146): avc: denied { read write } for pid=4240 comm="setroubleshootd" name="__db.001" dev=dm-0 ino=26968215 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201155817.014:146): arch=c000003e syscall=2 success=yes exit=11 a0=98ca90 a1=2 a2=0 a3=3566ef79d2 items=0 ppid=1 pid=4240 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201155817.015:147): avc: denied { lock } for pid=4240 comm="setroubleshootd" path="/var/lib/rpm/Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201155817.015:147): arch=c000003e syscall=72 success=yes exit=0 a0=b a1=6 a2=409fec80 a3=b items=0 ppid=1 pid=4240 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201155845.882:148): avc: denied { write } for pid=2705 comm="httpd" name="mysql.sock" dev=dm-0 ino=27001779 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201155845.882:148): arch=c000003e syscall=42 success=yes exit=0 a0=11 a1=7fffeafc41b0 a2=6e a3=2aaab9cae5fa items=0 ppid=2694 pid=2705 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201155854.965:149): user pid=3699 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1201155854.966:150): user pid=3699 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201155921.694:151): avc: denied { search } for pid=4265 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201155921.694:151): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4265 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201156056.328:152): user pid=4312 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201156056.328:153): user pid=4312 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201156056.334:154): user pid=4312 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201156070.760:155): user pid=4312 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1201156090.518:156): user pid=3351 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1201156090.518:157): user pid=3351 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_ABEND msg=audit(1201156097.619:158): auid=1000 uid=1000 gid=1000 subj=system_u:system_r:unconfined_t:s0 pid=3178 comm="pulseaudio" sig=6 >type=USER_END msg=audit(1201156097.713:159): user pid=3050 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201156097.713:160): user pid=3050 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1201156101.696:161): avc: denied { getattr } for pid=4265 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156101.696:161): arch=c000003e syscall=4 success=yes exit=0 a0=4d457c0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4265 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156101.696:162): avc: denied { search } for pid=4265 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156101.696:162): arch=c000003e syscall=4 success=yes exit=0 a0=4d457c0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4265 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1201156108.317:163): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2982 comm="gdm-binary" sig=11 >type=AVC msg=audit(1201156111.106:164): avc: denied { write } for pid=4603 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156111.106:164): avc: denied { remove_name } for pid=4603 comm="mysqld" name="mysql.sock" dev=dm-0 ino=27001779 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156111.106:164): avc: denied { unlink } for pid=4603 comm="mysqld" name="mysql.sock" dev=dm-0 ino=27001779 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201156111.106:164): arch=c000003e syscall=87 success=yes exit=0 a0=7ffffb939f5c a1=0 a2=2 a3=4510b008 items=0 ppid=4126 pid=4603 auid=1000 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156111.697:165): avc: denied { search } for pid=4265 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156111.697:165): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4265 auid=1000 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=DAEMON_END msg=audit(1201156116.567:6434): auditd normal halt, sending auid=4294967295 pid=4662 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201156218.613:5090): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2107 res=success >type=CONFIG_CHANGE msg=audit(1201156218.712:16): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201156218.712:17): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201156218.752:18): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201156218.752:19): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AVC msg=audit(1201156219.489:20): user pid=2124 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1201156220.157:21): avc: denied { setattr } for pid=2136 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156220.157:21): arch=c000003e syscall=90 success=yes exit=0 a0=80c690 a1=180 a2=31db561958 a3=6e657473696c5f74 items=0 ppid=1 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201156220.170:22): avc: denied { read } for pid=2136 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156220.170:22): arch=c000003e syscall=2 success=yes exit=5 a0=2aaab33f1ef4 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201156220.440:23): avc: denied { search } for pid=2230 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201156220.440:23): avc: denied { read } for pid=2230 comm="ntpd" name="drift" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156220.440:23): arch=c000003e syscall=2 success=yes exit=5 a0=2aaaaadad990 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201156220.456:24): avc: denied { getattr } for pid=2230 comm="ntpd" path="/var/lib/ntp/drift" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156220.456:24): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7fffcb8629b0 a2=7fffcb8629b0 a3=0 items=0 ppid=1 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201156221.508:25): avc: denied { write } for pid=2395 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156221.508:25): avc: denied { add_name } for pid=2395 comm="mysqld" name="douglas.lower-test" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156221.508:25): avc: denied { create } for pid=2395 comm="mysqld" name="douglas.lower-test" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201156221.508:25): avc: denied { read write } for pid=2395 comm="mysqld" name="douglas.lower-test" dev=dm-0 ino=27001699 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156221.508:25): arch=c000003e syscall=2 success=yes exit=3 a0=7fff3a00ef00 a1=42 a2=1b6 a3=7fff3a00e34b items=0 ppid=2338 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156221.508:26): avc: denied { remove_name } for pid=2395 comm="mysqld" name="douglas.lower-test" dev=dm-0 ino=27001699 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156221.508:26): avc: denied { unlink } for pid=2395 comm="mysqld" name="douglas.lower-test" dev=dm-0 ino=27001699 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156221.508:26): arch=c000003e syscall=87 success=yes exit=0 a0=7fff3a00ef00 a1=10 a2=31ccc16260 a3=7365742d7265776f items=0 ppid=2338 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156221.629:27): avc: denied { write } for pid=2395 comm="mysqld" name="ibdata1" dev=dm-0 ino=27001759 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156221.629:27): arch=c000003e syscall=2 success=yes exit=3 a0=7fff3a00c320 a1=2 a2=0 a3=8f6b92 items=0 ppid=2338 pid=2395 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156221.882:28): avc: denied { read } for pid=2395 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156221.882:28): arch=c000003e syscall=2 success=yes exit=10 a0=14928a0 a1=90800 a2=7fff3a00ee60 a3=8fd1d2 items=0 ppid=2338 pid=2395 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156221.914:29): avc: denied { create } for pid=2395 comm="mysqld" name="mysql.sock" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201156221.914:29): arch=c000003e syscall=49 success=yes exit=0 a0=c a1=7fff3a00f530 a2=6e a3=7fff3a00f528 items=0 ppid=2338 pid=2395 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156223.916:30): avc: denied { write } for pid=2249 comm="setroubleshootd" name="rpm" dev=dm-0 ino=26968067 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156223.916:30): arch=c000003e syscall=21 success=yes exit=0 a0=9b6fe0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201156223.916:31): avc: denied { read write } for pid=2249 comm="setroubleshootd" name="__db.001" dev=dm-0 ino=26968215 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156223.916:31): arch=c000003e syscall=2 success=yes exit=10 a0=b2fae0 a1=2 a2=0 a3=3566ef79d2 items=0 ppid=1 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201156223.917:32): avc: denied { lock } for pid=2249 comm="setroubleshootd" path="/var/lib/rpm/Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156223.917:32): arch=c000003e syscall=72 success=yes exit=0 a0=a a1=6 a2=409fec80 a3=a items=0 ppid=1 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201156224.653:33): avc: denied { search } for pid=2449 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156224.653:33): arch=c000003e syscall=21 success=no exit=-2 a0=820d30 a1=4 a2=820d49 a3=415012 items=0 ppid=2448 pid=2449 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156224.662:34): avc: denied { search } for pid=2449 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1201156224.662:34): avc: denied { read } for pid=2449 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067485 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156224.662:34): arch=c000003e syscall=2 success=yes exit=3 a0=820d30 a1=0 a2=1b6 a3=0 items=0 ppid=2448 pid=2449 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156224.686:35): avc: denied { getattr } for pid=2449 comm="clamav-milter" path="/var/lib/clamav/daily.inc/daily.info" dev=dm-0 ino=27067485 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156224.686:35): arch=c000003e syscall=5 success=yes exit=0 a0=3 a1=7fff295686f0 a2=7fff295686f0 a3=0 items=0 ppid=2448 pid=2449 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156224.703:36): avc: denied { read } for pid=2449 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156224.703:36): arch=c000003e syscall=2 success=yes exit=3 a0=81fb80 a1=90800 a2=31 a3=3fe326d70a items=0 ppid=2448 pid=2449 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156224.824:37): avc: denied { getattr } for pid=2441 comm="spamd" path="/root/.razor/identity" dev=dm-0 ino=26346206 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201156224.824:37): arch=c000003e syscall=6 success=yes exit=0 a0=2f2b8a0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=1 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1201156224.824:38): avc: denied { read } for pid=2441 comm="spamd" name="identity" dev=dm-0 ino=26346206 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201156224.824:38): arch=c000003e syscall=89 success=yes exit=18 a0=2f2b8a0 a1=7fffa507b260 a2=fff a3=31cc1529f0 items=0 ppid=1 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1201156226.320:39): avc: denied { read } for pid=2449 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156226.320:39): arch=c000003e syscall=2 success=yes exit=4 a0=820da0 a1=90800 a2=31 a3=0 items=0 ppid=2448 pid=2449 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156226.320:40): avc: denied { getattr } for pid=2449 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156226.320:40): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff29568700 a2=7fff29568700 a3=0 items=0 ppid=2448 pid=2449 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156231.285:41): avc: denied { write } for pid=2622 comm="mysqld" name="settings.MYI" dev=dm-0 ino=27067406 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156231.285:41): arch=c000003e syscall=2 success=yes exit=26 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2338 pid=2622 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201156231.782:42): user pid=2668 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Cups-PDF uri=cups-pdf:/ banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201156231.798:43): user pid=2668 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=pineneedle uri=hp:/net/Officejet_7300_series?ip=10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)' >type=AVC msg=audit(1201156232.637:44): avc: denied { search } for pid=2718 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201156232.637:44): avc: denied { search } for pid=2718 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156232.637:44): avc: denied { read write } for pid=2718 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=AVC msg=audit(1201156232.654:45): avc: denied { lock } for pid=2719 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156232.654:45): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=SYSCALL msg=audit(1201156232.637:44): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201156232.654:46): avc: denied { getattr } for pid=2719 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156232.654:46): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb5954130 a2=7fffb5954130 a3=0 items=0 ppid=2694 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201156232.680:47): avc: denied { write } for pid=2719 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156232.680:47): avc: denied { add_name } for pid=2719 comm="hal-acl-tool" name="acl-list.3D064T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156232.680:47): avc: denied { create } for pid=2719 comm="hal-acl-tool" name="acl-list.3D064T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201156232.680:47): avc: denied { read write } for pid=2719 comm="hal-acl-tool" name="acl-list.3D064T" dev=dm-0 ino=27001779 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156232.680:47): arch=c000003e syscall=2 success=yes exit=4 a0=60e4e0 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2694 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201156232.680:48): avc: denied { getattr } for pid=2719 comm="hal-acl-tool" path="/var/lib/hal/acl-list.3D064T" dev=dm-0 ino=27001779 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156232.680:48): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb5954450 a2=7fffb5954450 a3=31cc1529f0 items=0 ppid=2694 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201156232.681:49): avc: denied { remove_name } for pid=2719 comm="hal-acl-tool" name="acl-list.3D064T" dev=dm-0 ino=27001779 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156232.681:49): avc: denied { rename } for pid=2719 comm="hal-acl-tool" name="acl-list.3D064T" dev=dm-0 ino=27001779 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201156232.681:49): avc: denied { unlink } for pid=2719 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156232.681:49): arch=c000003e syscall=82 success=yes exit=0 a0=60e390 a1=403ed2 a2=31 a3=22 items=0 ppid=2694 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201156232.686:50): avc: denied { unlink } for pid=2718 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001779 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156232.686:50): arch=c000003e syscall=82 success=yes exit=0 a0=606330 a1=403ed2 a2=31 a3=31cc1529f0 items=0 ppid=2694 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201156232.690:51): avc: denied { lock } for pid=2723 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001788 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156232.690:51): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201156234.945:52): avc: denied { write } for pid=2670 comm="mysqld" name="recordmatch.MYI" dev=dm-0 ino=27067403 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156234.945:52): arch=c000003e syscall=2 success=yes exit=53 a0=45189a40 a1=2 a2=0 a3=4517f30b items=0 ppid=2338 pid=2670 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156236.133:53): avc: denied { write } for pid=2670 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156236.133:53): avc: denied { add_name } for pid=2670 comm="mysqld" name="#sql_95b_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156236.133:53): avc: denied { create } for pid=2670 comm="mysqld" name="#sql_95b_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201156236.133:53): avc: denied { read write } for pid=2670 comm="mysqld" name="#sql_95b_0.MYI" dev=dm-0 ino=27001795 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156236.133:53): arch=c000003e syscall=2 success=yes exit=61 a0=4518b0a0 a1=202c2 a2=1b0 a3=45188bab items=0 ppid=2338 pid=2670 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156236.134:54): avc: denied { getattr } for pid=2670 comm="mysqld" path="/var/lib/mysql/#sql_95b_0.MYI" dev=dm-0 ino=27001795 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156236.134:54): arch=c000003e syscall=6 success=yes exit=0 a0=45180a50 a1=451808f0 a2=451808f0 a3=45180a5b items=0 ppid=2338 pid=2670 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156236.135:55): avc: denied { remove_name } for pid=2670 comm="mysqld" name="#sql_95b_0.MYI" dev=dm-0 ino=27001795 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156236.135:55): avc: denied { unlink } for pid=2670 comm="mysqld" name="#sql_95b_0.MYI" dev=dm-0 ino=27001795 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156236.135:55): arch=c000003e syscall=87 success=yes exit=0 a0=4518b7d0 a1=10 a2=4518b5ae a3=0 items=0 ppid=2338 pid=2670 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156238.139:56): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201156238.139:56): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156238.139:56): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156238.139:57): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156238.139:57): arch=c000003e syscall=4 success=yes exit=0 a0=4d457c0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156238.139:58): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156238.139:58): arch=c000003e syscall=4 success=yes exit=0 a0=4d457c0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201156247.043:59): user pid=2982 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201156247.058:60): user pid=2982 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201156247.081:61): user pid=2982 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1201156247.094:62): login pid=2982 uid=0 old auid=4294967295 new auid=1000 >type=USER_ROLE_CHANGE msg=audit(1201156247.110:63): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201156247.144:64): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1201156247.144:65): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=AVC msg=audit(1201156247.288:66): avc: denied { search } for pid=3028 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201156247.288:66): avc: denied { search } for pid=3028 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156247.288:66): avc: denied { read write } for pid=3028 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001779 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156247.288:66): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201156247.288:67): avc: denied { lock } for pid=3028 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001779 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156247.288:67): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201156247.355:68): avc: denied { getattr } for pid=3028 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001779 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156247.355:68): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7fff3a2588d0 a2=7fff3a2588d0 a3=0 items=0 ppid=2694 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201156247.357:69): avc: denied { write } for pid=3028 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156247.357:69): avc: denied { add_name } for pid=3028 comm="hal-acl-tool" name="acl-list.TVDM5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156247.357:69): avc: denied { create } for pid=3028 comm="hal-acl-tool" name="acl-list.TVDM5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156247.357:69): arch=c000003e syscall=2 success=yes exit=5 a0=6182c0 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2694 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201156247.357:70): avc: denied { remove_name } for pid=3028 comm="hal-acl-tool" name="acl-list.TVDM5T" dev=dm-0 ino=27001806 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156247.357:70): avc: denied { rename } for pid=3028 comm="hal-acl-tool" name="acl-list.TVDM5T" dev=dm-0 ino=27001806 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201156247.357:70): avc: denied { unlink } for pid=3028 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001779 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156247.357:70): arch=c000003e syscall=82 success=yes exit=0 a0=6181e0 a1=403ed2 a2=31 a3=22 items=0 ppid=2694 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201156248.140:71): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201156248.140:71): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156248.140:71): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156248.140:72): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156248.140:72): arch=c000003e syscall=4 success=yes exit=0 a0=4d457c0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156248.140:73): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156248.140:73): arch=c000003e syscall=4 success=yes exit=0 a0=4d457c0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156258.141:74): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156258.141:74): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156331.367:75): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156331.367:75): arch=c000003e syscall=4 success=yes exit=0 a0=4d457c0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156331.367:76): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156331.367:76): arch=c000003e syscall=4 success=yes exit=0 a0=4d457c0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201156489.376:77): user pid=3386 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201156489.379:78): user pid=3386 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201156489.441:79): user pid=3386 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201156489.441:80): user pid=3386 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201156501.128:81): avc: denied { getattr } for pid=3454 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156501.128:81): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=3453 pid=3454 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201156501.150:82): avc: denied { search } for pid=3454 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156501.150:82): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=3453 pid=3454 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201156501.165:83): avc: denied { append } for pid=3454 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156501.165:83): arch=c000003e syscall=2 success=yes exit=4 a0=2f013d0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=3453 pid=3454 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201156501.165:84): avc: denied { ioctl } for pid=3454 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156501.165:84): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff22293840 a3=31cc1529f0 items=0 ppid=3453 pid=3454 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201156501.165:85): avc: denied { getattr } for pid=3454 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156501.165:85): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=3453 pid=3454 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201156501.183:86): avc: denied { getattr } for pid=3454 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201156501.183:86): arch=c000003e syscall=6 success=yes exit=0 a0=2f04ba0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=3453 pid=3454 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201156501.183:87): avc: denied { read } for pid=3454 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201156501.183:87): arch=c000003e syscall=89 success=yes exit=17 a0=2f04ba0 a1=7fff22292c80 a2=fff a3=31cc1529f0 items=0 ppid=3453 pid=3454 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201156501.184:88): avc: denied { read } for pid=3454 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156501.184:88): arch=c000003e syscall=2 success=yes exit=7 a0=2f074f0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=3453 pid=3454 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201156501.197:89): avc: denied { read } for pid=3454 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156501.197:89): arch=c000003e syscall=2 success=yes exit=7 a0=2effca0 a1=90800 a2=0 a3=9 items=0 ppid=3453 pid=3454 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201156507.968:90): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156507.968:90): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156512.541:91): avc: denied { write } for pid=3477 comm="mysqld" name="keybindings.MYI" dev=dm-0 ino=27067334 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156512.541:91): arch=c000003e syscall=2 success=yes exit=36 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2338 pid=3477 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156640.499:92): avc: denied { write } for pid=3519 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156640.499:92): avc: denied { add_name } for pid=3519 comm="mysqld" name="#sql_95b_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156640.499:92): avc: denied { create } for pid=3519 comm="mysqld" name="#sql_95b_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201156640.499:92): avc: denied { read write } for pid=3519 comm="mysqld" name="#sql_95b_0.MYI" dev=dm-0 ino=27001779 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156640.499:92): arch=c000003e syscall=2 success=yes exit=88 a0=450c80a0 a1=202c2 a2=1b0 a3=450c5bab items=0 ppid=2338 pid=3519 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156640.500:93): avc: denied { getattr } for pid=3519 comm="mysqld" path="/var/lib/mysql/#sql_95b_0.MYI" dev=dm-0 ino=27001779 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156640.500:93): arch=c000003e syscall=6 success=yes exit=0 a0=450bda50 a1=450bd8f0 a2=450bd8f0 a3=450bda5b items=0 ppid=2338 pid=3519 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156640.502:94): avc: denied { remove_name } for pid=3519 comm="mysqld" name="#sql_95b_0.MYI" dev=dm-0 ino=27001779 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201156640.502:94): avc: denied { unlink } for pid=3519 comm="mysqld" name="#sql_95b_0.MYI" dev=dm-0 ino=27001779 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201156640.502:94): arch=c000003e syscall=87 success=yes exit=0 a0=450c87d0 a1=10 a2=450c85ae a3=0 items=0 ppid=2338 pid=3519 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201156647.164:95): avc: denied { write } for pid=2505 comm="httpd" name="mysql.sock" dev=dm-0 ino=27001699 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201156647.164:95): arch=c000003e syscall=42 success=yes exit=0 a0=11 a1=7fff01f97200 a2=6e a3=2aaab9cae5fa items=0 ppid=2494 pid=2505 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1201156647.969:96): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156647.969:96): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156937.972:97): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201156937.972:97): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201156967.972:98): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201156967.972:98): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201157123.306:99): user pid=3711 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1201157123.308:100): user pid=3711 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1201157123.349:101): user pid=3711 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1201157123.349:102): user pid=3711 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1201157254.244:103): avc: denied { write } for pid=3513 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201157254.244:103): arch=c000003e syscall=2 success=yes exit=88 a0=45189e90 a1=2 a2=0 a3=4517f75b items=0 ppid=2338 pid=3513 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201157257.976:104): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201157257.976:104): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201157537.981:105): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201157537.981:105): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201157567.981:106): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201157567.981:106): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201157589.089:107): user pid=3386 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1201157589.090:108): user pid=3386 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201157597.982:109): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201157597.982:109): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201157601.114:110): user pid=3711 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201157601.114:111): user pid=3711 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1201157860.695:112): avc: denied { write } for pid=3513 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201157860.695:112): arch=c000003e syscall=2 success=yes exit=88 a0=45189e90 a1=2 a2=0 a3=4517f75b items=0 ppid=2338 pid=3513 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201158061.330:113): user pid=4856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201158061.331:114): user pid=4856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201158061.331:115): login pid=4856 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201158061.367:116): user pid=4856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201158061.418:117): user pid=4856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201158061.418:118): user pid=4856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201158257.991:119): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201158257.991:119): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201158336.700:120): user pid=5018 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201158336.703:121): user pid=5018 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201158336.747:122): user pid=5018 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201158336.747:123): user pid=5018 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1201158428.498:124): user pid=5018 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1201158428.498:125): user pid=5018 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201158458.019:126): avc: denied { search } for pid=5084 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201158458.019:126): avc: denied { search } for pid=5084 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201158458.019:126): avc: denied { read write } for pid=5084 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201158458.019:126): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201158458.019:127): avc: denied { lock } for pid=5084 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201158458.019:127): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201158458.039:128): avc: denied { getattr } for pid=5084 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201158458.039:128): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7fff4301ead0 a2=7fff4301ead0 a3=0 items=0 ppid=2694 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201158458.039:129): avc: denied { write } for pid=5084 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201158458.039:129): avc: denied { add_name } for pid=5084 comm="hal-acl-tool" name="acl-list.RWVF5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201158458.039:129): avc: denied { create } for pid=5084 comm="hal-acl-tool" name="acl-list.RWVF5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201158458.039:129): arch=c000003e syscall=2 success=yes exit=5 a0=610ef0 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2694 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201158458.039:130): avc: denied { remove_name } for pid=5084 comm="hal-acl-tool" name="acl-list.RWVF5T" dev=dm-0 ino=27001806 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201158458.039:130): avc: denied { rename } for pid=5084 comm="hal-acl-tool" name="acl-list.RWVF5T" dev=dm-0 ino=27001806 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201158458.039:130): avc: denied { unlink } for pid=5084 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201158458.039:130): arch=c000003e syscall=82 success=yes exit=0 a0=6141b0 a1=403ed2 a2=41 a3=31cc1529f0 items=0 ppid=2694 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=USER_END msg=audit(1201158458.052:131): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201158458.052:132): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1201158465.127:133): avc: denied { write } for pid=3513 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201158465.127:133): arch=c000003e syscall=2 success=yes exit=88 a0=45189e90 a1=2 a2=0 a3=4517f75b items=0 ppid=2338 pid=3513 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201158467.994:134): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201158467.994:134): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201158467.994:135): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201158467.994:135): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201158467.994:136): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201158467.994:136): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201158569.902:137): avc: denied { getattr } for pid=5127 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201158569.902:137): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=5126 pid=5127 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201158569.902:138): avc: denied { search } for pid=5127 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201158569.902:138): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=5126 pid=5127 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201158569.902:139): avc: denied { append } for pid=5127 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201158569.902:139): arch=c000003e syscall=2 success=yes exit=4 a0=2e95750 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=5126 pid=5127 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201158569.902:140): avc: denied { ioctl } for pid=5127 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201158569.902:140): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffd62c8880 a3=31cc1529f0 items=0 ppid=5126 pid=5127 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201158569.902:141): avc: denied { getattr } for pid=5127 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201158569.902:141): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=5126 pid=5127 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201158569.903:142): avc: denied { getattr } for pid=5127 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201158569.903:142): arch=c000003e syscall=6 success=yes exit=0 a0=2e98f20 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=5126 pid=5127 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201158569.903:143): avc: denied { read } for pid=5127 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201158569.903:143): arch=c000003e syscall=89 success=yes exit=17 a0=2e98f20 a1=7fffd62c7cc0 a2=fff a3=31cc1529f0 items=0 ppid=5126 pid=5127 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201158569.903:144): avc: denied { read } for pid=5127 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201158569.903:144): arch=c000003e syscall=2 success=yes exit=6 a0=2e9ee80 a1=0 a2=0 a3=3b162f5170 items=0 ppid=5126 pid=5127 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201158569.904:145): avc: denied { read } for pid=5127 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201158569.904:145): arch=c000003e syscall=2 success=yes exit=6 a0=2e95020 a1=90800 a2=0 a3=9 items=0 ppid=5126 pid=5127 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201158887.999:146): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201158887.999:146): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201159820.431:147): avc: denied { search } for pid=2230 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201159820.431:147): avc: denied { write } for pid=2230 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201159820.431:147): avc: denied { add_name } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201159820.431:147): avc: denied { create } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201159820.431:147): avc: denied { write } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201159820.431:147): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201159820.431:148): avc: denied { getattr } for pid=2230 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201159820.431:148): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcb862b50 a2=7fffcb862b50 a3=0 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201159820.431:149): avc: denied { remove_name } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201159820.431:149): avc: denied { rename } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201159820.431:149): avc: denied { unlink } for pid=2230 comm="ntpd" name="drift" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201159820.431:149): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=0 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201161601.589:150): user pid=5297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201161601.589:151): user pid=5297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201161601.589:152): login pid=5297 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201161601.632:153): user pid=5297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201161608.190:154): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201161608.190:154): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201161661.588:155): user pid=5320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201161661.589:156): user pid=5320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201161661.589:157): login pid=5320 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201161661.626:158): user pid=5320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201161661.644:159): user pid=5320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201161661.645:160): user pid=5320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201161668.191:161): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201161668.191:161): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201163420.623:162): avc: denied { search } for pid=2230 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201163420.623:162): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201163438.217:163): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201163438.217:163): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201163636.387:164): avc: denied { write } for pid=3513 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201163636.387:164): arch=c000003e syscall=2 success=yes exit=88 a0=45189e90 a1=2 a2=0 a3=4517f75b items=0 ppid=2338 pid=3513 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201164265.833:165): avc: denied { getattr } for pid=5470 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201164265.833:165): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=5469 pid=5470 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201164265.833:166): avc: denied { search } for pid=5470 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201164265.833:166): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=5469 pid=5470 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201164265.833:167): avc: denied { append } for pid=5470 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201164265.833:167): arch=c000003e syscall=2 success=yes exit=4 a0=2efea00 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=5469 pid=5470 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201164265.833:168): avc: denied { ioctl } for pid=5470 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201164265.833:168): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffd3a3bff0 a3=31cc1529f0 items=0 ppid=5469 pid=5470 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201164265.833:169): avc: denied { getattr } for pid=5470 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201164265.833:169): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=5469 pid=5470 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201164265.834:170): avc: denied { getattr } for pid=5470 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201164265.834:170): arch=c000003e syscall=6 success=yes exit=0 a0=2f021d0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=5469 pid=5470 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201164265.834:171): avc: denied { read } for pid=5470 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201164265.834:171): arch=c000003e syscall=89 success=yes exit=17 a0=2f021d0 a1=7fffd3a3b430 a2=fff a3=31cc1529f0 items=0 ppid=5469 pid=5470 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201164265.834:172): avc: denied { read } for pid=5470 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201164265.834:172): arch=c000003e syscall=2 success=yes exit=6 a0=2f06780 a1=0 a2=0 a3=3b162f5170 items=0 ppid=5469 pid=5470 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201164265.835:173): avc: denied { read } for pid=5470 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201164265.835:173): arch=c000003e syscall=2 success=yes exit=6 a0=2efe2d0 a1=90800 a2=0 a3=9 items=0 ppid=5469 pid=5470 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201165261.656:174): user pid=5525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201165261.657:175): user pid=5525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201165261.657:176): login pid=5525 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201165261.700:177): user pid=5525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201165261.719:178): user pid=5525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201165261.719:179): user pid=5525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201168861.732:180): user pid=5744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201168861.733:181): user pid=5744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201168861.733:182): login pid=5744 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201168861.777:183): user pid=5744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201168861.796:184): user pid=5744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201168861.797:185): user pid=5744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201168868.293:186): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201168868.293:186): arch=c000003e syscall=2 success=yes exit=4 a0=4d434a0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201169590.474:187): user pid=5297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201169590.474:188): user pid=5297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201169598.304:189): avc: denied { read } for pid=2456 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067483 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201169598.304:189): arch=c000003e syscall=2 success=yes exit=4 a0=4d43ee0 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201169599.647:190): avc: denied { read } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201169599.647:190): arch=c000003e syscall=2 success=yes exit=5 a0=771f7f0 a1=90800 a2=31 a3=0 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201169599.647:191): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201169599.647:191): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=409ffd40 a2=409ffd40 a3=0 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201170620.624:192): avc: denied { write } for pid=2230 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201170620.624:192): avc: denied { add_name } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201170620.624:192): avc: denied { create } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201170620.624:192): avc: denied { write } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201170620.624:192): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201170620.624:193): avc: denied { getattr } for pid=2230 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201170620.624:193): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcb862b40 a2=7fffcb862b40 a3=0 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201170620.624:194): avc: denied { remove_name } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201170620.624:194): avc: denied { rename } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201170620.624:194): avc: denied { unlink } for pid=2230 comm="ntpd" name="drift" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201170620.624:194): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201172401.484:195): user pid=5984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201172401.484:196): user pid=5984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201172401.484:197): login pid=5984 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201172401.525:198): user pid=5984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201172401.848:199): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201172401.848:199): arch=c000003e syscall=2 success=yes exit=4 a0=a6a7900 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201172461.484:200): user pid=6000 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201172461.485:201): user pid=6000 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201172461.485:202): login pid=6000 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201172461.525:203): user pid=6000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201172461.542:204): user pid=6000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201172461.543:205): user pid=6000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201173584.945:206): avc: denied { getattr } for pid=6088 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201173584.945:206): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=6087 pid=6088 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201173584.945:207): avc: denied { search } for pid=6088 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201173584.945:207): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=6087 pid=6088 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201173584.945:208): avc: denied { append } for pid=6088 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201173584.945:208): arch=c000003e syscall=2 success=yes exit=4 a0=2f99dd0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=6087 pid=6088 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201173584.945:209): avc: denied { ioctl } for pid=6088 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201173584.945:209): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff54ee64a0 a3=31cc1529f0 items=0 ppid=6087 pid=6088 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201173584.945:210): avc: denied { getattr } for pid=6088 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201173584.945:210): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=6087 pid=6088 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201173584.956:211): avc: denied { getattr } for pid=6088 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201173584.956:211): arch=c000003e syscall=6 success=yes exit=0 a0=2f9e5a0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=6087 pid=6088 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201173584.956:212): avc: denied { read } for pid=6088 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201173584.956:212): arch=c000003e syscall=89 success=yes exit=17 a0=2f9e5a0 a1=7fff54ee58e0 a2=fff a3=31cc1529f0 items=0 ppid=6087 pid=6088 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201173584.957:213): avc: denied { read } for pid=6088 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201173584.957:213): arch=c000003e syscall=2 success=yes exit=6 a0=2fa1ee0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=6087 pid=6088 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201173584.958:214): avc: denied { read } for pid=6088 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201173584.958:214): arch=c000003e syscall=2 success=yes exit=6 a0=2f996f0 a1=90800 a2=0 a3=9 items=0 ppid=6087 pid=6088 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201173621.866:215): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201173621.866:215): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201173661.866:216): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201173661.866:216): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201173953.050:217): avc: denied { write } for pid=3513 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201173953.050:217): arch=c000003e syscall=2 success=yes exit=88 a0=45189e90 a1=2 a2=0 a3=4517f75b items=0 ppid=2338 pid=3513 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201174220.624:218): avc: denied { search } for pid=2230 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201174220.624:218): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201176061.556:219): user pid=6294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201176061.557:220): user pid=6294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201176061.557:221): login pid=6294 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201176061.597:222): user pid=6294 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201176061.616:223): user pid=6294 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201176061.616:224): user pid=6294 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201176121.622:225): user pid=6322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201176121.622:226): user pid=6322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201176121.622:227): login pid=6322 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201176121.663:228): user pid=6322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201176784.551:229): avc: denied { write } for pid=6393 comm="spamassassin" name="server.c303.cloudmark.com.conf" dev=dm-2 ino=22528040 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201176784.551:229): arch=c000003e syscall=2 success=yes exit=8 a0=2ead6b0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=6392 pid=6393 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201176784.787:230): avc: denied { write } for pid=6393 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201176784.787:230): avc: denied { add_name } for pid=6393 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201176784.787:230): avc: denied { create } for pid=6393 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201176784.787:230): arch=c000003e syscall=2 success=yes exit=9 a0=2eb14b0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=6392 pid=6393 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201176784.787:231): avc: denied { remove_name } for pid=6393 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201176784.787:231): avc: denied { unlink } for pid=6393 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201176784.787:231): arch=c000003e syscall=87 success=yes exit=0 a0=2eb1250 a1=1f39870 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=6392 pid=6393 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201179485.765:232): avc: denied { search } for pid=6541 comm="webalizer" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:webalizer_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201179485.765:232): avc: denied { getattr } for pid=6541 comm="webalizer" path="/var/lib/webalizer/dns_cache.db" dev=dm-0 ino=27001732 scontext=system_u:system_r:webalizer_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201179485.765:232): arch=c000003e syscall=4 success=yes exit=0 a0=8244e0 a1=7fff96564480 a2=7fff96564480 a3=61 items=0 ppid=6333 pid=6541 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="webalizer" exe="/usr/bin/webalizer" subj=system_u:system_r:webalizer_t:s0 key=(null) >type=AVC msg=audit(1201179485.781:233): avc: denied { read write } for pid=6541 comm="webalizer" name="dns_cache.db" dev=dm-0 ino=27001732 scontext=system_u:system_r:webalizer_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201179485.781:233): arch=c000003e syscall=2 success=yes exit=4 a0=826270 a1=2 a2=0 a3=62642e65686361 items=0 ppid=6333 pid=6541 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="webalizer" exe="/usr/bin/webalizer" subj=system_u:system_r:webalizer_t:s0 key=(null) >type=AVC msg=audit(1201179485.787:234): avc: denied { lock } for pid=6541 comm="webalizer" path="/var/lib/webalizer/dns_cache.db" dev=dm-0 ino=27001732 scontext=system_u:system_r:webalizer_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201179485.787:234): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=6 a2=7fff965645c0 a3=0 items=0 ppid=6333 pid=6541 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="webalizer" exe="/usr/bin/webalizer" subj=system_u:system_r:webalizer_t:s0 key=(null) >type=AVC msg=audit(1201179491.943:235): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201179491.943:235): arch=c000003e syscall=2 success=yes exit=4 a0=a6a7900 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201179491.943:236): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201179491.943:236): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201179539.711:237): user pid=6322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201179539.712:238): user pid=6322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201179541.944:239): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201179541.944:239): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201179541.944:240): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201179541.944:240): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201179661.719:241): user pid=7150 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201179661.719:242): user pid=7150 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201179661.719:243): login pid=7150 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201179661.763:244): user pid=7150 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201179661.783:245): user pid=7150 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201179661.783:246): user pid=7150 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201179730.811:247): avc: denied { write } for pid=3513 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201179730.811:247): arch=c000003e syscall=2 success=yes exit=88 a0=45189e90 a1=2 a2=0 a3=4517f75b items=0 ppid=2338 pid=3513 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=CRED_DISP msg=audit(1201180388.771:248): user pid=5984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201180388.772:249): user pid=5984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201180391.956:250): avc: denied { read } for pid=2456 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067483 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201180391.956:250): arch=c000003e syscall=2 success=yes exit=4 a0=820d70 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201180393.295:251): avc: denied { read } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201180393.295:251): arch=c000003e syscall=2 success=yes exit=5 a0=822260 a1=90800 a2=31 a3=0 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201180393.295:252): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201180393.295:252): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=409ffd40 a2=409ffd40 a3=0 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201181052.452:253): avc: denied { getattr } for pid=7241 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201181052.452:253): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7240 pid=7241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201181052.452:254): avc: denied { search } for pid=7241 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201181052.452:254): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7240 pid=7241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201181052.453:255): avc: denied { append } for pid=7241 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201181052.453:255): arch=c000003e syscall=2 success=yes exit=4 a0=2ec5660 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=7240 pid=7241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201181052.453:256): avc: denied { ioctl } for pid=7241 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201181052.453:256): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffa1f06330 a3=31cc1529f0 items=0 ppid=7240 pid=7241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201181052.453:257): avc: denied { getattr } for pid=7241 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201181052.453:257): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=7240 pid=7241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201181052.453:258): avc: denied { getattr } for pid=7241 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201181052.453:258): arch=c000003e syscall=6 success=yes exit=0 a0=2ec8e30 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7240 pid=7241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201181052.453:259): avc: denied { read } for pid=7241 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201181052.453:259): arch=c000003e syscall=89 success=yes exit=17 a0=2ec8e30 a1=7fffa1f05770 a2=fff a3=31cc1529f0 items=0 ppid=7240 pid=7241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201181052.454:260): avc: denied { read } for pid=7241 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201181052.454:260): arch=c000003e syscall=2 success=yes exit=6 a0=2ed1830 a1=0 a2=0 a3=3b162f5170 items=0 ppid=7240 pid=7241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201181052.455:261): avc: denied { read } for pid=7241 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201181052.455:261): arch=c000003e syscall=2 success=yes exit=6 a0=2ec4f80 a1=90800 a2=0 a3=9 items=0 ppid=7240 pid=7241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201181365.218:262): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201181365.218:262): arch=c000003e syscall=2 success=yes exit=4 a0=589be70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201181420.623:263): avc: denied { search } for pid=2230 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201181420.623:263): avc: denied { write } for pid=2230 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201181420.623:263): avc: denied { add_name } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201181420.623:263): avc: denied { create } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201181420.623:263): avc: denied { write } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201181420.623:263): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201181420.623:264): avc: denied { getattr } for pid=2230 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201181420.623:264): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcb862b40 a2=7fffcb862b40 a3=0 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201181420.623:265): avc: denied { remove_name } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201181420.623:265): avc: denied { rename } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201181420.623:265): avc: denied { unlink } for pid=2230 comm="ntpd" name="drift" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201181420.623:265): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201183201.784:266): user pid=7398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201183201.785:267): user pid=7398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201183201.785:268): login pid=7398 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201183201.825:269): user pid=7398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201183261.784:270): user pid=7422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201183261.785:271): user pid=7422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201183261.785:272): login pid=7422 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201183261.829:273): user pid=7422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201183261.847:274): user pid=7422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201183261.847:275): user pid=7422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201183665.243:276): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201183665.243:276): arch=c000003e syscall=2 success=yes exit=4 a0=589be70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201184347.528:277): avc: denied { getattr } for pid=7500 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201184347.528:277): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7499 pid=7500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201184347.528:278): avc: denied { search } for pid=7500 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201184347.528:278): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7499 pid=7500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201184347.528:279): avc: denied { append } for pid=7500 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201184347.528:279): arch=c000003e syscall=2 success=yes exit=4 a0=2ea2840 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=7499 pid=7500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201184347.528:280): avc: denied { ioctl } for pid=7500 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201184347.528:280): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff29c53200 a3=31cc1529f0 items=0 ppid=7499 pid=7500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201184347.528:281): avc: denied { getattr } for pid=7500 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201184347.528:281): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=7499 pid=7500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201184347.529:282): avc: denied { getattr } for pid=7500 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201184347.529:282): arch=c000003e syscall=6 success=yes exit=0 a0=2ea6010 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7499 pid=7500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201184347.529:283): avc: denied { read } for pid=7500 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201184347.529:283): arch=c000003e syscall=89 success=yes exit=17 a0=2ea6010 a1=7fff29c52640 a2=fff a3=31cc1529f0 items=0 ppid=7499 pid=7500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201184347.529:284): avc: denied { read } for pid=7500 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201184347.529:284): arch=c000003e syscall=2 success=yes exit=6 a0=2ead590 a1=0 a2=0 a3=3b162f5170 items=0 ppid=7499 pid=7500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201184347.530:285): avc: denied { read } for pid=7500 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201184347.530:285): arch=c000003e syscall=2 success=yes exit=6 a0=2ea2160 a1=90800 a2=0 a3=9 items=0 ppid=7499 pid=7500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201185020.624:286): avc: denied { search } for pid=2230 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201185020.624:286): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201185035.261:287): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201185035.261:287): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201185035.261:288): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201185035.261:288): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201185491.585:289): avc: denied { write } for pid=3513 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201185491.585:289): arch=c000003e syscall=2 success=yes exit=84 a0=45189e90 a1=2 a2=0 a3=4517f75b items=0 ppid=2338 pid=3513 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201186861.859:290): user pid=7669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201186861.859:291): user pid=7669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201186861.859:292): login pid=7669 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201186861.899:293): user pid=7669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201186861.918:294): user pid=7669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201186861.918:295): user pid=7669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201187047.139:296): avc: denied { write } for pid=2294 comm="rpc.mountd" name="control" dev=tmpfs ino=252 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201187047.139:296): arch=c000003e syscall=2 success=yes exit=11 a0=7fffc5d30030 a1=2 a2=0 a3=0 items=0 ppid=1 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201187424.529:297): user pid=7717 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201187424.532:298): user pid=7717 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201187424.557:299): user pid=7717 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1201187424.601:300): login pid=7717 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201187424.601:301): user pid=7717 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201187424.617:302): user pid=7731 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=CRED_REFR msg=audit(1201187424.624:303): user pid=7731 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1201187425.294:304): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201187425.294:304): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201187425.294:304): arch=c000003e syscall=2 success=yes exit=4 a0=589be70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201187425.294:305): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201187425.294:305): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201187425.294:306): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201187425.294:306): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201187616.978:307): avc: denied { write } for pid=3513 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201187616.978:307): arch=c000003e syscall=2 success=yes exit=84 a0=45189e90 a1=2 a2=0 a3=4517f75b items=0 ppid=2338 pid=3513 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=CRED_DISP msg=audit(1201187707.116:308): user pid=7717 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1201187707.117:309): user pid=7717 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1201187765.298:310): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201187765.298:310): arch=c000003e syscall=2 success=yes exit=4 a0=589be70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201187803.416:311): user pid=7823 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201187803.428:312): user pid=7823 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1201187803.443:313): login pid=7823 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1201187803.443:314): user pid=7823 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201187803.451:315): user pid=7831 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201187803.457:316): user pid=7823 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=AVC msg=audit(1201187805.299:317): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201187805.299:317): arch=c000003e syscall=2 success=yes exit=4 a0=589be70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201187805.299:318): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201187805.299:318): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201187805.299:319): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201187805.299:319): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201187918.173:320): avc: denied { write } for pid=3513 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201187918.173:320): arch=c000003e syscall=2 success=yes exit=84 a0=45189e90 a1=2 a2=0 a3=4517f75b items=0 ppid=2338 pid=3513 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201188607.984:321): avc: denied { getattr } for pid=7929 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201188607.984:321): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7928 pid=7929 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188607.984:322): avc: denied { search } for pid=7929 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201188607.984:322): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7928 pid=7929 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188607.984:323): avc: denied { append } for pid=7929 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201188607.984:323): arch=c000003e syscall=2 success=yes exit=4 a0=2f3e3c0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=7928 pid=7929 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188607.984:324): avc: denied { ioctl } for pid=7929 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201188607.984:324): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff904e7aa0 a3=31cc1529f0 items=0 ppid=7928 pid=7929 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188607.984:325): avc: denied { getattr } for pid=7929 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201188607.984:325): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=7928 pid=7929 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188607.985:326): avc: denied { getattr } for pid=7929 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201188607.985:326): arch=c000003e syscall=6 success=yes exit=0 a0=2f42b90 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7928 pid=7929 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188607.985:327): avc: denied { read } for pid=7929 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201188607.985:327): arch=c000003e syscall=89 success=yes exit=17 a0=2f42b90 a1=7fff904e6ee0 a2=fff a3=31cc1529f0 items=0 ppid=7928 pid=7929 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188607.985:328): avc: denied { read } for pid=7929 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201188607.985:328): arch=c000003e syscall=2 success=yes exit=6 a0=2f4dba0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=7928 pid=7929 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188607.986:329): avc: denied { read } for pid=7929 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201188607.986:329): arch=c000003e syscall=2 success=yes exit=6 a0=2f3dce0 a1=90800 a2=0 a3=9 items=0 ppid=7928 pid=7929 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188615.309:330): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201188615.309:330): arch=c000003e syscall=2 success=yes exit=4 a0=589be70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201188620.624:331): avc: denied { search } for pid=2230 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201188620.624:331): avc: denied { write } for pid=2230 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201188620.624:331): avc: denied { add_name } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201188620.624:331): avc: denied { create } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201188620.624:331): avc: denied { write } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201188620.624:331): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201188620.624:332): avc: denied { getattr } for pid=2230 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201188620.624:332): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcb862b40 a2=7fffcb862b40 a3=0 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201188620.624:333): avc: denied { remove_name } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201188620.624:333): avc: denied { rename } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201188620.624:333): avc: denied { unlink } for pid=2230 comm="ntpd" name="drift" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201188620.624:333): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201188798.869:334): user pid=7823 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1201188798.869:335): user pid=7823 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1201188875.313:336): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201188875.313:336): arch=c000003e syscall=2 success=yes exit=4 a0=589be70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201188980.308:337): avc: denied { getattr } for pid=7973 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201188980.308:337): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7972 pid=7973 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188980.308:338): avc: denied { search } for pid=7973 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201188980.308:338): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7972 pid=7973 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188980.308:339): avc: denied { append } for pid=7973 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201188980.308:339): arch=c000003e syscall=2 success=yes exit=4 a0=2ead550 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=7972 pid=7973 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188980.308:340): avc: denied { ioctl } for pid=7973 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201188980.308:340): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffdff68520 a3=31cc1529f0 items=0 ppid=7972 pid=7973 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188980.308:341): avc: denied { getattr } for pid=7973 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201188980.308:341): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=7972 pid=7973 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188980.309:342): avc: denied { getattr } for pid=7973 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201188980.309:342): arch=c000003e syscall=6 success=yes exit=0 a0=2eb0d20 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7972 pid=7973 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188980.309:343): avc: denied { read } for pid=7973 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201188980.309:343): arch=c000003e syscall=89 success=yes exit=17 a0=2eb0d20 a1=7fffdff67960 a2=fff a3=31cc1529f0 items=0 ppid=7972 pid=7973 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188980.309:344): avc: denied { read } for pid=7973 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201188980.309:344): arch=c000003e syscall=2 success=yes exit=6 a0=2eb5db0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=7972 pid=7973 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201188980.311:345): avc: denied { read } for pid=7973 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201188980.311:345): arch=c000003e syscall=2 success=yes exit=6 a0=2eabe20 a1=90800 a2=0 a3=9 items=0 ppid=7972 pid=7973 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201189225.318:346): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201189225.318:346): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201189285.319:347): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201189285.319:347): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201189428.162:348): avc: denied { write } for pid=3513 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201189428.162:348): arch=c000003e syscall=2 success=yes exit=84 a0=45189e90 a1=2 a2=0 a3=4517f75b items=0 ppid=2338 pid=3513 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201190461.934:349): user pid=8078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201190461.935:350): user pid=8078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201190461.935:351): login pid=8078 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201190461.988:352): user pid=8078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201190462.012:353): user pid=8078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201190462.012:354): user pid=8078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201191187.932:355): user pid=7398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201191187.932:356): user pid=7398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201192220.623:357): avc: denied { search } for pid=2230 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201192220.623:357): avc: denied { write } for pid=2230 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201192220.623:357): avc: denied { add_name } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201192220.623:357): avc: denied { create } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201192220.623:357): avc: denied { write } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201192220.623:357): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201192220.623:358): avc: denied { getattr } for pid=2230 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201192220.623:358): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcb862b40 a2=7fffcb862b40 a3=0 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201192220.623:359): avc: denied { remove_name } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201192220.623:359): avc: denied { rename } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201192220.623:359): avc: denied { unlink } for pid=2230 comm="ntpd" name="drift" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201192220.623:359): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201192235.362:360): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201192235.362:360): arch=c000003e syscall=2 success=yes exit=4 a0=589be70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201194001.943:361): user pid=8331 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201194001.944:362): user pid=8331 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201194001.944:363): login pid=8331 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201194001.995:364): user pid=8331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201194061.943:365): user pid=8356 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201194061.944:366): user pid=8356 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201194061.944:367): login pid=8356 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201194061.994:368): user pid=8356 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201194062.015:369): user pid=8356 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201194062.015:370): user pid=8356 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201194080.477:371): avc: denied { getattr } for pid=8381 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201194080.477:371): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=8380 pid=8381 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201194080.478:372): avc: denied { search } for pid=8381 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201194080.478:372): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=8380 pid=8381 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201194080.480:373): avc: denied { read } for pid=8381 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201194080.480:373): arch=c000003e syscall=2 success=yes exit=6 a0=2f5d020 a1=90800 a2=0 a3=9 items=0 ppid=8380 pid=8381 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201194085.389:374): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201194085.389:374): arch=c000003e syscall=2 success=yes exit=4 a0=589be70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201194530.051:375): avc: denied { append } for pid=8419 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201194530.051:375): arch=c000003e syscall=2 success=yes exit=4 a0=2efef10 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=8418 pid=8419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201194530.051:376): avc: denied { ioctl } for pid=8419 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201194530.051:376): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffad55cb10 a3=31cc1529f0 items=0 ppid=8418 pid=8419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201194530.051:377): avc: denied { getattr } for pid=8419 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201194530.051:377): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=8418 pid=8419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201194530.052:378): avc: denied { getattr } for pid=8419 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201194530.052:378): arch=c000003e syscall=6 success=yes exit=0 a0=2f026e0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=8418 pid=8419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201194530.052:379): avc: denied { read } for pid=8419 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201194530.052:379): arch=c000003e syscall=89 success=yes exit=17 a0=2f026e0 a1=7fffad55bf50 a2=fff a3=31cc1529f0 items=0 ppid=8418 pid=8419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201194530.052:380): avc: denied { read } for pid=8419 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201194530.052:380): arch=c000003e syscall=2 success=yes exit=6 a0=2f09c10 a1=0 a2=0 a3=3b162f5170 items=0 ppid=8418 pid=8419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201195820.623:381): avc: denied { search } for pid=2230 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201195820.623:381): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201195835.414:382): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201195835.414:382): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201197085.433:383): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201197085.433:383): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201197321.348:384): avc: denied { write } for pid=3513 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201197321.348:384): arch=c000003e syscall=2 success=yes exit=84 a0=45189e90 a1=2 a2=0 a3=4517f75b items=0 ppid=2338 pid=3513 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201197661.029:385): user pid=8616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201197661.029:386): user pid=8616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201197661.029:387): login pid=8616 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201197661.080:388): user pid=8616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201197661.100:389): user pid=8616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201197661.101:390): user pid=8616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201201261.112:391): user pid=8829 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201201261.113:392): user pid=8829 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201201261.113:393): login pid=8829 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201201261.167:394): user pid=8829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201201261.186:395): user pid=8829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201201261.186:396): user pid=8829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201201465.358:397): avc: denied { write } for pid=8872 comm="spamassassin" name="server.c301.cloudmark.com.conf" dev=dm-2 ino=120127858 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201201465.358:397): arch=c000003e syscall=2 success=yes exit=8 a0=2f4ac80 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=8871 pid=8872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201201465.772:398): avc: denied { write } for pid=8872 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201201465.772:398): avc: denied { add_name } for pid=8872 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201201465.772:398): avc: denied { create } for pid=8872 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201201465.772:398): arch=c000003e syscall=2 success=yes exit=9 a0=2f5f8b0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=8871 pid=8872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201201465.784:399): avc: denied { remove_name } for pid=8872 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127862 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201201465.784:399): avc: denied { unlink } for pid=8872 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127862 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201201465.784:399): arch=c000003e syscall=87 success=yes exit=0 a0=2f5f8b0 a1=1f36650 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=8871 pid=8872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201201875.501:400): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201201875.501:400): arch=c000003e syscall=2 success=yes exit=4 a0=589be70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201201899.336:401): avc: denied { write } for pid=8907 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201201899.336:401): avc: denied { add_name } for pid=8907 comm="mysqld" name="#sql_95b_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201201899.336:401): avc: denied { create } for pid=8907 comm="mysqld" name="#sql_95b_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201201899.336:401): avc: denied { read write } for pid=8907 comm="mysqld" name="#sql_95b_0.MYI" dev=dm-0 ino=27001795 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201201899.336:401): arch=c000003e syscall=2 success=yes exit=129 a0=451cc0a0 a1=202c2 a2=1b0 a3=451c9bab items=0 ppid=2338 pid=8907 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201201899.337:402): avc: denied { getattr } for pid=8907 comm="mysqld" path="/var/lib/mysql/#sql_95b_0.MYI" dev=dm-0 ino=27001795 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201201899.337:402): arch=c000003e syscall=6 success=yes exit=0 a0=451c1a50 a1=451c18f0 a2=451c18f0 a3=451c1a5b items=0 ppid=2338 pid=8907 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201201899.337:403): avc: denied { remove_name } for pid=8907 comm="mysqld" name="#sql_95b_0.MYI" dev=dm-0 ino=27001795 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201201899.337:403): avc: denied { unlink } for pid=8907 comm="mysqld" name="#sql_95b_0.MYI" dev=dm-0 ino=27001795 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201201899.337:403): arch=c000003e syscall=87 success=yes exit=0 a0=451cc7d0 a1=10 a2=451cc5ae a3=0 items=0 ppid=2338 pid=8907 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=CRED_DISP msg=audit(1201201988.832:404): user pid=8331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201201988.833:405): user pid=8331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201201995.502:406): avc: denied { read } for pid=2456 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067482 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201201995.502:406): arch=c000003e syscall=2 success=yes exit=4 a0=4d43ee0 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201201996.821:407): avc: denied { read } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201201996.821:407): arch=c000003e syscall=2 success=yes exit=5 a0=70499b0 a1=90800 a2=31 a3=0 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201201996.821:408): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201201996.821:408): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=409ffd40 a2=409ffd40 a3=0 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201203020.624:409): avc: denied { write } for pid=2230 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201203020.624:409): avc: denied { add_name } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201203020.624:409): avc: denied { create } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201203020.624:409): avc: denied { write } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201203020.624:409): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201203020.624:410): avc: denied { getattr } for pid=2230 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201203020.624:410): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcb862b40 a2=7fffcb862b40 a3=0 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201203020.624:411): avc: denied { remove_name } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201203020.624:411): avc: denied { rename } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201203020.624:411): avc: denied { unlink } for pid=2230 comm="ntpd" name="drift" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201203020.624:411): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201204801.843:412): user pid=9072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201204801.843:413): user pid=9072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201204801.844:414): login pid=9072 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201204801.895:415): user pid=9072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201204861.843:416): user pid=9097 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201204861.844:417): user pid=9097 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201204861.844:418): login pid=9097 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201204861.893:419): user pid=9097 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201204861.914:420): user pid=9097 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201204861.915:421): user pid=9097 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201204985.770:422): avc: denied { getattr } for pid=9129 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201204985.770:422): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=9128 pid=9129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201204985.770:423): avc: denied { search } for pid=9129 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201204985.770:423): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=9128 pid=9129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201204985.771:424): avc: denied { append } for pid=9129 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201204985.771:424): arch=c000003e syscall=2 success=yes exit=4 a0=3004670 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=9128 pid=9129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201204985.771:425): avc: denied { ioctl } for pid=9129 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201204985.771:425): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffcbe223d0 a3=31cc1529f0 items=0 ppid=9128 pid=9129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201204985.771:426): avc: denied { getattr } for pid=9129 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201204985.771:426): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=9128 pid=9129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201204985.772:427): avc: denied { read } for pid=9129 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201204985.772:427): arch=c000003e syscall=2 success=yes exit=6 a0=300d740 a1=0 a2=0 a3=3b162f5170 items=0 ppid=9128 pid=9129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201204985.773:428): avc: denied { read } for pid=9129 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201204985.773:428): arch=c000003e syscall=2 success=yes exit=6 a0=3003f40 a1=90800 a2=0 a3=9 items=0 ppid=9128 pid=9129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201204986.354:429): avc: denied { write } for pid=9129 comm="spamassassin" name="server.c304.cloudmark.com.conf" dev=dm-2 ino=120127860 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201204986.354:429): arch=c000003e syscall=2 success=yes exit=8 a0=30540f0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=9128 pid=9129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201204986.518:430): avc: denied { write } for pid=9129 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201204986.518:430): avc: denied { add_name } for pid=9129 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201204986.518:430): avc: denied { create } for pid=9129 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201204986.518:430): arch=c000003e syscall=2 success=yes exit=9 a0=3061b50 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=9128 pid=9129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201204986.518:431): avc: denied { remove_name } for pid=9129 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127862 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201204986.518:431): avc: denied { unlink } for pid=9129 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127862 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201204986.518:431): arch=c000003e syscall=87 success=yes exit=0 a0=30619d0 a1=1f4b6e0 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=9128 pid=9129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201204988.967:432): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201204988.967:432): arch=c000003e syscall=2 success=yes exit=4 a0=ae7d510 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201206597.291:433): avc: denied { getattr } for pid=9218 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201206597.291:433): arch=c000003e syscall=6 success=yes exit=0 a0=2f8e660 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=9217 pid=9218 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201206597.291:434): avc: denied { read } for pid=9218 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201206597.291:434): arch=c000003e syscall=89 success=yes exit=17 a0=2f8e660 a1=7fff3296f360 a2=fff a3=31cc1529f0 items=0 ppid=9217 pid=9218 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201206608.987:435): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201206608.987:435): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201206620.623:436): avc: denied { search } for pid=2230 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201206620.623:436): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201206723.278:437): avc: denied { write } for pid=8675 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201206723.278:437): arch=c000003e syscall=2 success=yes exit=87 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2338 pid=8675 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201208461.928:438): user pid=9331 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201208461.929:439): user pid=9331 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201208461.929:440): login pid=9331 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201208461.980:441): user pid=9331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201208462.002:442): user pid=9331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201208462.003:443): user pid=9331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201212061.016:444): user pid=10083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201212061.016:445): user pid=10083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201212061.016:446): login pid=10083 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201212061.067:447): user pid=10083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201212061.086:448): user pid=10083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201212061.087:449): user pid=10083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201212069.050:450): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201212069.050:450): arch=c000003e syscall=2 success=yes exit=4 a0=ae7d510 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201212789.229:451): user pid=9072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201212789.229:452): user pid=9072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201212799.058:453): avc: denied { read } for pid=2456 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067485 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201212799.058:453): arch=c000003e syscall=2 success=yes exit=4 a0=820d70 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201213820.624:454): avc: denied { write } for pid=2230 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201213820.624:454): avc: denied { add_name } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201213820.624:454): avc: denied { create } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201213820.624:454): avc: denied { write } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201213820.624:454): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201213820.624:455): avc: denied { getattr } for pid=2230 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201213820.624:455): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcb862b40 a2=7fffcb862b40 a3=0 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201213820.624:456): avc: denied { remove_name } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201213820.624:456): avc: denied { rename } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201213820.624:456): avc: denied { unlink } for pid=2230 comm="ntpd" name="drift" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201213820.624:456): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201215601.241:457): user pid=10512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201215601.242:458): user pid=10512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201215601.242:459): login pid=10512 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201215601.291:460): user pid=10512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201215661.242:461): user pid=10529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201215661.242:462): user pid=10529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201215661.242:463): login pid=10529 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201215661.290:464): user pid=10529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201215661.309:465): user pid=10529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201215661.309:466): user pid=10529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201217420.624:467): avc: denied { search } for pid=2230 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201217420.624:467): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201219261.320:468): user pid=10718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201219261.320:469): user pid=10718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201219261.320:470): login pid=10718 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201219261.367:471): user pid=10718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201219261.389:472): user pid=10718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201219261.389:473): user pid=10718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201221042.348:474): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201221042.348:474): arch=c000003e syscall=2 success=yes exit=4 a0=9da84c0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201221081.542:475): avc: denied { getattr } for pid=10840 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201221081.542:475): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10839 pid=10840 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201221081.542:476): avc: denied { search } for pid=10840 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201221081.542:476): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10839 pid=10840 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201221081.542:477): avc: denied { append } for pid=10840 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201221081.542:477): arch=c000003e syscall=2 success=yes exit=4 a0=2f448b0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=10839 pid=10840 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201221081.542:478): avc: denied { ioctl } for pid=10840 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201221081.542:478): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff59f87540 a3=31cc1529f0 items=0 ppid=10839 pid=10840 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201221081.542:479): avc: denied { getattr } for pid=10840 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201221081.542:479): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=10839 pid=10840 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201221081.543:480): avc: denied { getattr } for pid=10840 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201221081.543:480): arch=c000003e syscall=6 success=yes exit=0 a0=2f48080 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10839 pid=10840 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201221081.543:481): avc: denied { read } for pid=10840 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201221081.543:481): arch=c000003e syscall=89 success=yes exit=17 a0=2f48080 a1=7fff59f86980 a2=fff a3=31cc1529f0 items=0 ppid=10839 pid=10840 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201221081.544:482): avc: denied { read } for pid=10840 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201221081.544:482): arch=c000003e syscall=2 success=yes exit=6 a0=2f4b860 a1=0 a2=0 a3=3b162f5170 items=0 ppid=10839 pid=10840 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201221081.545:483): avc: denied { read } for pid=10840 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201221081.545:483): arch=c000003e syscall=2 success=yes exit=6 a0=2f431c0 a1=90800 a2=0 a3=9 items=0 ppid=10839 pid=10840 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201221082.090:484): avc: denied { write } for pid=10840 comm="spamassassin" name="server.c301.cloudmark.com.conf" dev=dm-2 ino=120127858 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201221082.090:484): arch=c000003e syscall=2 success=yes exit=8 a0=2f91760 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=10839 pid=10840 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201221082.290:485): avc: denied { write } for pid=10840 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201221082.290:485): avc: denied { add_name } for pid=10840 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201221082.290:485): avc: denied { create } for pid=10840 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201221082.290:485): arch=c000003e syscall=2 success=yes exit=9 a0=2f9c2b0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=10839 pid=10840 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201221082.290:486): avc: denied { remove_name } for pid=10840 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127862 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201221082.290:486): avc: denied { unlink } for pid=10840 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127862 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201221082.290:486): arch=c000003e syscall=87 success=yes exit=0 a0=2f9c930 a1=1f40e90 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=10839 pid=10840 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201221092.348:487): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201221092.348:487): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201221302.350:488): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201221302.350:488): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201221899.793:489): avc: denied { write } for pid=8675 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201221899.793:489): arch=c000003e syscall=2 success=yes exit=87 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2338 pid=8675 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201222861.401:490): user pid=10955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201222861.401:491): user pid=10955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201222861.401:492): login pid=10955 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201222861.454:493): user pid=10955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201222861.473:494): user pid=10955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201222861.473:495): user pid=10955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201223587.409:496): user pid=10512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201223587.409:497): user pid=10512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201226401.420:498): user pid=11191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201226401.420:499): user pid=11191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201226401.420:500): login pid=11191 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201226401.470:501): user pid=11191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201226461.420:502): user pid=11209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201226461.421:503): user pid=11209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201226461.421:504): login pid=11209 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201226461.472:505): user pid=11209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201226461.495:506): user pid=11209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201226461.496:507): user pid=11209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201226462.405:508): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201226462.405:508): arch=c000003e syscall=2 success=yes exit=4 a0=9da84c0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201228220.624:509): avc: denied { write } for pid=2230 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201228220.624:509): avc: denied { add_name } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201228220.624:509): avc: denied { create } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201228220.624:509): avc: denied { write } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201228220.624:509): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201228220.624:510): avc: denied { getattr } for pid=2230 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201228220.624:510): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcb862b40 a2=7fffcb862b40 a3=0 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201228220.624:511): avc: denied { remove_name } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201228220.624:511): avc: denied { rename } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201228220.624:511): avc: denied { unlink } for pid=2230 comm="ntpd" name="drift" dev=dm-0 ino=27001795 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201228220.624:511): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201229876.266:512): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1201229876.267:513): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1201229885.260:514): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201229885.265:515): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201229885.274:516): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1201229885.288:517): login pid=2982 uid=0 old auid=1000 new auid=1000 >type=USER_ROLE_CHANGE msg=audit(1201229885.307:518): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201229885.324:519): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1201229885.325:520): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=AVC msg=audit(1201229885.376:521): avc: denied { search } for pid=11476 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201229885.376:521): avc: denied { search } for pid=11476 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201229885.376:521): avc: denied { read write } for pid=11476 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001806 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201229885.376:521): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=11476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201229885.377:522): avc: denied { lock } for pid=11476 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001806 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201229885.377:522): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=11476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201229885.399:523): avc: denied { getattr } for pid=11476 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001806 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201229885.399:523): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7fffba88fbf0 a2=7fffba88fbf0 a3=0 items=0 ppid=2694 pid=11476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201229885.399:524): avc: denied { write } for pid=11476 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201229885.399:524): avc: denied { add_name } for pid=11476 comm="hal-acl-tool" name="acl-list.X96O5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201229885.399:524): avc: denied { create } for pid=11476 comm="hal-acl-tool" name="acl-list.X96O5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201229885.399:524): arch=c000003e syscall=2 success=yes exit=5 a0=610ef0 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2694 pid=11476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201229885.399:525): avc: denied { remove_name } for pid=11476 comm="hal-acl-tool" name="acl-list.X96O5T" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201229885.399:525): avc: denied { rename } for pid=11476 comm="hal-acl-tool" name="acl-list.X96O5T" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201229885.399:525): avc: denied { unlink } for pid=11476 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001806 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201229885.399:525): arch=c000003e syscall=82 success=yes exit=0 a0=6141b0 a1=403ed2 a2=41 a3=31cc1529f0 items=0 ppid=2694 pid=11476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201229892.453:526): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201229892.453:526): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201229892.453:526): arch=c000003e syscall=2 success=yes exit=4 a0=9da84c0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201229892.453:527): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201229892.453:527): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201229942.454:528): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201229942.454:528): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201230032.455:529): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201230032.455:529): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201230061.511:530): user pid=11813 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201230061.512:531): user pid=11813 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201230061.512:532): login pid=11813 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201230061.566:533): user pid=11813 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201230061.586:534): user pid=11813 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201230061.586:535): user pid=11813 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201230096.405:536): avc: denied { write } for pid=8675 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201230096.405:536): arch=c000003e syscall=2 success=yes exit=87 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2338 pid=8675 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201230254.119:537): avc: denied { getattr } for pid=11871 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201230254.119:537): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=11870 pid=11871 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201230254.119:538): avc: denied { search } for pid=11871 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201230254.119:538): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=11870 pid=11871 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201230254.120:539): avc: denied { append } for pid=11871 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201230254.120:539): arch=c000003e syscall=2 success=yes exit=4 a0=2e955b0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=11870 pid=11871 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201230254.120:540): avc: denied { ioctl } for pid=11871 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201230254.120:540): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff658e4e90 a3=31cc1529f0 items=0 ppid=11870 pid=11871 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201230254.120:541): avc: denied { getattr } for pid=11871 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201230254.120:541): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=11870 pid=11871 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201230254.120:542): avc: denied { getattr } for pid=11871 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201230254.120:542): arch=c000003e syscall=6 success=yes exit=0 a0=2e98d80 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=11870 pid=11871 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201230254.120:543): avc: denied { read } for pid=11871 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201230254.120:543): arch=c000003e syscall=89 success=yes exit=17 a0=2e98d80 a1=7fff658e42d0 a2=fff a3=31cc1529f0 items=0 ppid=11870 pid=11871 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201230254.121:544): avc: denied { read } for pid=11871 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201230254.121:544): arch=c000003e syscall=2 success=yes exit=6 a0=2e9fbe0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=11870 pid=11871 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201230254.122:545): avc: denied { read } for pid=11871 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201230254.122:545): arch=c000003e syscall=2 success=yes exit=6 a0=2e94e80 a1=90800 a2=0 a3=9 items=0 ppid=11870 pid=11871 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1201230255.251:546): user pid=11863 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201230255.253:547): user pid=11863 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201230255.311:548): user pid=11863 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201230255.311:549): user pid=11863 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201230262.458:550): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201230262.458:550): arch=c000003e syscall=2 success=yes exit=4 a0=9da84c0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201230314.639:551): user pid=11958 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1201230314.641:552): user pid=11958 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1201230314.699:553): user pid=11958 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1201230314.699:554): user pid=11958 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1201230355.856:555): user pid=12056 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1201230355.858:556): user pid=12056 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1201230355.912:557): user pid=12056 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1201230355.913:558): user pid=12056 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1201230375.701:559): user pid=12147 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1201230375.703:560): user pid=12147 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1201230375.765:561): user pid=12147 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1201230375.766:562): user pid=12147 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_CHAUTHTOK msg=audit(1201230545.871:563): user pid=12211 uid=0 auid=1000 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201230545.907:564): user pid=12212 uid=0 auid=1000 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201230545.910:565): user pid=12213 uid=0 auid=1000 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201230545.912:566): user pid=12214 uid=0 auid=1000 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1201230547.088:567): avc: denied { search } for pid=12217 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201230547.088:567): avc: denied { search } for pid=12217 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201230547.088:567): avc: denied { read write } for pid=12217 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001808 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201230547.088:567): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=12217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201230547.089:568): avc: denied { lock } for pid=12217 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001808 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201230547.089:568): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=12217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201230547.107:569): avc: denied { getattr } for pid=12217 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001808 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201230547.107:569): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7fff94080d20 a2=7fff94080d20 a3=0 items=0 ppid=2694 pid=12217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201230547.107:570): avc: denied { write } for pid=12217 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201230547.107:570): avc: denied { add_name } for pid=12217 comm="hal-acl-tool" name="acl-list.3HBG5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201230547.107:570): avc: denied { create } for pid=12217 comm="hal-acl-tool" name="acl-list.3HBG5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201230547.107:570): arch=c000003e syscall=2 success=yes exit=5 a0=610ef0 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2694 pid=12217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201230547.113:571): avc: denied { remove_name } for pid=12217 comm="hal-acl-tool" name="acl-list.3HBG5T" dev=dm-0 ino=27001837 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201230547.113:571): avc: denied { rename } for pid=12217 comm="hal-acl-tool" name="acl-list.3HBG5T" dev=dm-0 ino=27001837 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201230547.113:571): avc: denied { unlink } for pid=12217 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001808 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201230547.113:571): arch=c000003e syscall=82 success=yes exit=0 a0=6141b0 a1=403ed2 a2=41 a3=31cc1529f0 items=0 ppid=2694 pid=12217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201230552.463:572): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201230552.463:572): arch=c000003e syscall=2 success=yes exit=4 a0=9da84c0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201230552.463:573): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201230552.463:573): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201230552.463:574): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201230552.463:574): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201230612.463:575): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201230612.463:575): arch=c000003e syscall=2 success=yes exit=4 a0=9da84c0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201230622.464:576): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201230622.464:576): arch=c000003e syscall=2 success=yes exit=4 a0=9da84c0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201230622.464:577): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201230622.464:577): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201230642.464:578): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201230642.464:578): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201230702.836:579): avc: denied { write } for pid=8675 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201230702.836:579): arch=c000003e syscall=2 success=yes exit=87 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2338 pid=8675 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201230738.999:580): avc: denied { setattr } for pid=15079 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201230738.999:580): arch=c000003e syscall=90 success=yes exit=0 a0=7c8860 a1=180 a2=31db561958 a3=6e657473696c5f74 items=0 ppid=1 pid=15079 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201230739.000:581): avc: denied { read } for pid=15079 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201230739.000:581): arch=c000003e syscall=2 success=yes exit=5 a0=2aaab35fcef4 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=15079 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201230752.466:582): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201230752.466:582): arch=c000003e syscall=2 success=yes exit=4 a0=9da84c0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201230754.468:583): avc: denied { write } for pid=15081 comm="setroubleshootd" name="rpm" dev=dm-0 ino=26968067 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201230754.468:583): arch=c000003e syscall=21 success=yes exit=0 a0=b24290 a1=2 a2=0 a3=0 items=0 ppid=1 pid=15081 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201230754.468:584): avc: denied { read write } for pid=15081 comm="setroubleshootd" name="__db.001" dev=dm-0 ino=26968215 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201230754.468:584): arch=c000003e syscall=2 success=yes exit=11 a0=9b3540 a1=2 a2=0 a3=3566ef79d2 items=0 ppid=1 pid=15081 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201230754.469:585): avc: denied { lock } for pid=15081 comm="setroubleshootd" path="/var/lib/rpm/Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201230754.469:585): arch=c000003e syscall=72 success=yes exit=0 a0=b a1=6 a2=409fec80 a3=b items=0 ppid=1 pid=15081 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201231090.135:586): user pid=12147 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1201231090.136:587): user pid=12147 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=AVC msg=audit(1201231092.470:588): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201231092.470:588): arch=c000003e syscall=2 success=yes exit=4 a0=9da84c0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201231098.126:589): user pid=11958 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201231098.127:590): user pid=11958 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1201231128.177:591): user pid=15217 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201231128.177:592): user pid=15217 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201231128.191:593): user pid=15217 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201231142.471:594): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201231142.471:594): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_END msg=audit(1201231149.162:595): user pid=15217 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201231192.472:596): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231192.472:596): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201231302.081:597): avc: denied { getattr } for pid=15273 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201231302.081:597): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=15272 pid=15273 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201231302.081:598): avc: denied { search } for pid=15273 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201231302.081:598): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=15272 pid=15273 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201231302.081:599): avc: denied { append } for pid=15273 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231302.081:599): arch=c000003e syscall=2 success=yes exit=4 a0=2e655a0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=15272 pid=15273 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201231302.081:600): avc: denied { ioctl } for pid=15273 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231302.081:600): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff29d362e0 a3=31cc1529f0 items=0 ppid=15272 pid=15273 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201231302.081:601): avc: denied { getattr } for pid=15273 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231302.081:601): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=15272 pid=15273 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201231302.082:602): avc: denied { getattr } for pid=15273 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201231302.082:602): arch=c000003e syscall=6 success=yes exit=0 a0=2e68d70 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=15272 pid=15273 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201231302.082:603): avc: denied { read } for pid=15273 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201231302.082:603): arch=c000003e syscall=89 success=yes exit=17 a0=2e68d70 a1=7fff29d35720 a2=fff a3=31cc1529f0 items=0 ppid=15272 pid=15273 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201231302.082:604): avc: denied { read } for pid=15273 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231302.082:604): arch=c000003e syscall=2 success=yes exit=6 a0=2e6b040 a1=0 a2=0 a3=3b162f5170 items=0 ppid=15272 pid=15273 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201231302.084:605): avc: denied { read } for pid=15273 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201231302.084:605): arch=c000003e syscall=2 success=yes exit=6 a0=2e64e70 a1=90800 a2=0 a3=9 items=0 ppid=15272 pid=15273 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201231306.264:606): avc: denied { write } for pid=8675 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231306.264:606): arch=c000003e syscall=2 success=yes exit=25 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2338 pid=8675 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201231332.473:607): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201231332.473:607): arch=c000003e syscall=2 success=yes exit=4 a0=9da84c0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201231482.475:608): avc: denied { getattr } for pid=2456 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231482.475:608): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201231482.475:609): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201231482.475:609): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201231610.471:610): avc: denied { write } for pid=8675 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231610.471:610): arch=c000003e syscall=2 success=yes exit=25 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2338 pid=8675 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=CRED_DISP msg=audit(1201231819.215:611): user pid=12056 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1201231819.216:612): user pid=12056 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=AVC msg=audit(1201231820.623:613): avc: denied { search } for pid=2230 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201231820.623:613): avc: denied { write } for pid=2230 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231820.623:613): avc: denied { add_name } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231820.623:613): avc: denied { create } for pid=2230 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201231820.623:613): avc: denied { write } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231820.623:613): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201231820.623:614): avc: denied { getattr } for pid=2230 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231820.623:614): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcb862b40 a2=7fffcb862b40 a3=0 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201231820.623:615): avc: denied { remove_name } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231820.623:615): avc: denied { rename } for pid=2230 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201231820.623:615): avc: denied { unlink } for pid=2230 comm="ntpd" name="drift" dev=dm-0 ino=27001783 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231820.623:615): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2230 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201231824.806:616): user pid=11863 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1201231824.806:617): user pid=11863 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201231832.443:618): avc: denied { search } for pid=17564 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201231832.443:618): avc: denied { search } for pid=17564 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231832.443:618): avc: denied { read write } for pid=17564 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001837 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231832.443:618): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=17564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201231832.443:619): avc: denied { lock } for pid=17564 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001837 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231832.443:619): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2694 pid=17564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=USER_END msg=audit(1201231832.460:620): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201231832.460:621): user pid=2982 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1201231832.479:622): avc: denied { read } for pid=2456 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201231832.479:622): arch=c000003e syscall=2 success=yes exit=4 a0=9da84c0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201231832.486:623): avc: denied { getattr } for pid=17564 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001837 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231832.486:623): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7fffab8d0940 a2=7fffab8d0940 a3=0 items=0 ppid=2694 pid=17564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201231832.487:624): avc: denied { write } for pid=17564 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231832.487:624): avc: denied { add_name } for pid=17564 comm="hal-acl-tool" name="acl-list.HFPN5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231832.487:624): avc: denied { create } for pid=17564 comm="hal-acl-tool" name="acl-list.HFPN5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231832.487:624): arch=c000003e syscall=2 success=yes exit=5 a0=610ef0 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2694 pid=17564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201231832.487:625): avc: denied { remove_name } for pid=17564 comm="hal-acl-tool" name="acl-list.HFPN5T" dev=dm-0 ino=27001783 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231832.487:625): avc: denied { rename } for pid=17564 comm="hal-acl-tool" name="acl-list.HFPN5T" dev=dm-0 ino=27001783 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201231832.487:625): avc: denied { unlink } for pid=17564 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001837 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231832.487:625): arch=c000003e syscall=82 success=yes exit=0 a0=6141b0 a1=403ed2 a2=41 a3=31cc1529f0 items=0 ppid=2694 pid=17564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1201231841.878:626): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2900 comm="gdm-binary" sig=11 >type=AVC msg=audit(1201231842.480:627): avc: denied { search } for pid=2456 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201231842.480:627): arch=c000003e syscall=2 success=yes exit=4 a0=9da84c0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201231842.480:628): avc: denied { search } for pid=2456 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201231842.480:628): arch=c000003e syscall=4 success=yes exit=0 a0=4d43ea0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=2456 auid=4294967295 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201231844.654:629): avc: denied { write } for pid=17843 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231844.654:629): avc: denied { remove_name } for pid=17843 comm="mysqld" name="mysql.sock" dev=dm-0 ino=27001699 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231844.654:629): avc: denied { unlink } for pid=17843 comm="mysqld" name="mysql.sock" dev=dm-0 ino=27001699 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201231844.654:629): arch=c000003e syscall=87 success=yes exit=0 a0=7fff3a00fed8 a1=0 a2=2 a3=450ca008 items=0 ppid=2338 pid=17843 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=DAEMON_END msg=audit(1201231850.118:5091): auditd normal halt, sending auid=4294967295 pid=17902 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201231952.684:8347): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2108 res=success >type=CONFIG_CHANGE msg=audit(1201231952.783:16): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201231952.783:17): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201231952.807:18): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201231952.807:19): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AVC msg=audit(1201231953.571:20): user pid=2125 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1201231954.163:21): avc: denied { setattr } for pid=2137 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231954.163:21): arch=c000003e syscall=90 success=yes exit=0 a0=80c690 a1=180 a2=31db561958 a3=6e657473696c5f74 items=0 ppid=1 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201231954.165:22): avc: denied { read } for pid=2137 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231954.165:22): arch=c000003e syscall=2 success=yes exit=5 a0=2aaab33f1ef4 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201231954.422:23): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201231954.422:23): avc: denied { read } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231954.422:23): arch=c000003e syscall=2 success=yes exit=5 a0=2aaaaadad990 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201231954.438:24): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231954.438:24): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7fffe4a25620 a2=7fffe4a25620 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201231955.565:25): avc: denied { write } for pid=2396 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231955.565:25): avc: denied { add_name } for pid=2396 comm="mysqld" name="douglas.lower-test" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231955.565:25): avc: denied { create } for pid=2396 comm="mysqld" name="douglas.lower-test" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201231955.565:25): avc: denied { read write } for pid=2396 comm="mysqld" name="douglas.lower-test" dev=dm-0 ino=27001699 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231955.565:25): arch=c000003e syscall=2 success=yes exit=3 a0=7fff00e57780 a1=42 a2=1b6 a3=7fff00e56bcb items=0 ppid=2339 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201231955.566:26): avc: denied { remove_name } for pid=2396 comm="mysqld" name="douglas.lower-test" dev=dm-0 ino=27001699 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231955.566:26): avc: denied { unlink } for pid=2396 comm="mysqld" name="douglas.lower-test" dev=dm-0 ino=27001699 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231955.566:26): arch=c000003e syscall=87 success=yes exit=0 a0=7fff00e57780 a1=10 a2=31ccc16260 a3=7365742d7265776f items=0 ppid=2339 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201231955.695:27): avc: denied { write } for pid=2396 comm="mysqld" name="ibdata1" dev=dm-0 ino=27001759 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231955.695:27): arch=c000003e syscall=2 success=yes exit=3 a0=7fff00e54ba0 a1=2 a2=0 a3=8f6b92 items=0 ppid=2339 pid=2396 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201231955.974:28): avc: denied { read } for pid=2396 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201231955.974:28): arch=c000003e syscall=2 success=yes exit=10 a0=14928a0 a1=90800 a2=7fff00e576e0 a3=8fd1d2 items=0 ppid=2339 pid=2396 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201231956.007:29): avc: denied { create } for pid=2396 comm="mysqld" name="mysql.sock" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201231956.007:29): arch=c000003e syscall=49 success=yes exit=0 a0=c a1=7fff00e57db0 a2=6e a3=7fff00e57da8 items=0 ppid=2339 pid=2396 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201231958.010:30): avc: denied { write } for pid=2251 comm="setroubleshootd" name="rpm" dev=dm-0 ino=26968067 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201231958.010:30): arch=c000003e syscall=21 success=yes exit=0 a0=aed320 a1=2 a2=0 a3=0 items=0 ppid=1 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201231958.011:31): avc: denied { read write } for pid=2251 comm="setroubleshootd" name="__db.001" dev=dm-0 ino=26968162 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231958.011:31): arch=c000003e syscall=2 success=yes exit=10 a0=97f130 a1=2 a2=0 a3=3566ef79d2 items=0 ppid=1 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201231958.011:32): avc: denied { lock } for pid=2251 comm="setroubleshootd" path="/var/lib/rpm/Packages" dev=dm-0 ino=26968074 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231958.011:32): arch=c000003e syscall=72 success=yes exit=0 a0=a a1=6 a2=409fec80 a3=a items=0 ppid=1 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201231959.143:33): avc: denied { getattr } for pid=2442 comm="spamd" path="/root/.razor/identity" dev=dm-0 ino=26346206 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201231959.143:33): arch=c000003e syscall=6 success=yes exit=0 a0=2f0b590 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=1 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1201231959.143:34): avc: denied { read } for pid=2442 comm="spamd" name="identity" dev=dm-0 ino=26346206 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201231959.143:34): arch=c000003e syscall=89 success=yes exit=18 a0=2f0b590 a1=7fffa3e4dfb0 a2=fff a3=31cc1529f0 items=0 ppid=1 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1201231961.916:35): avc: denied { write } for pid=2634 comm="mysqld" name="settings.MYI" dev=dm-0 ino=27067406 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231961.916:35): arch=c000003e syscall=2 success=yes exit=26 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2339 pid=2634 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201231962.460:36): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Cups-PDF uri=cups-pdf:/ banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201231962.497:37): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=pineneedle uri=hp:/net/Officejet_7300_series?ip=10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)' >type=AVC msg=audit(1201231963.329:38): avc: denied { search } for pid=2716 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201231963.329:38): avc: denied { search } for pid=2716 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231963.329:38): avc: denied { read write } for pid=2716 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001783 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231963.329:38): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2692 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201231963.330:39): avc: denied { lock } for pid=2716 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001783 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231963.330:39): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2692 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201231963.330:40): avc: denied { getattr } for pid=2716 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001783 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231963.330:40): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe3278c20 a2=7fffe3278c20 a3=0 items=0 ppid=2692 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201231963.350:41): avc: denied { write } for pid=2716 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231963.350:41): avc: denied { add_name } for pid=2716 comm="hal-acl-tool" name="acl-list.61LK5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231963.350:41): avc: denied { create } for pid=2716 comm="hal-acl-tool" name="acl-list.61LK5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231963.350:41): arch=c000003e syscall=2 success=yes exit=4 a0=609060 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2692 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201231963.351:42): avc: denied { remove_name } for pid=2716 comm="hal-acl-tool" name="acl-list.61LK5T" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231963.351:42): avc: denied { rename } for pid=2716 comm="hal-acl-tool" name="acl-list.61LK5T" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201231963.351:42): avc: denied { unlink } for pid=2716 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001783 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231963.351:42): arch=c000003e syscall=82 success=yes exit=0 a0=608980 a1=403ed2 a2=31 a3=6469765f305f3631 items=0 ppid=2692 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201231965.519:43): avc: denied { write } for pid=2668 comm="mysqld" name="recordmatch.MYI" dev=dm-0 ino=27067403 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201231965.519:43): arch=c000003e syscall=2 success=yes exit=54 a0=45189a40 a1=2 a2=0 a3=4517f30b items=0 ppid=2339 pid=2668 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201231966.353:44): avc: denied { write } for pid=2668 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231966.353:44): avc: denied { add_name } for pid=2668 comm="mysqld" name="#sql_95c_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231966.353:44): avc: denied { create } for pid=2668 comm="mysqld" name="#sql_95c_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201231966.353:44): avc: denied { read write } for pid=2668 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001795 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231966.353:44): arch=c000003e syscall=2 success=yes exit=62 a0=4518b0a0 a1=202c2 a2=1b0 a3=45188bab items=0 ppid=2339 pid=2668 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201231966.353:45): avc: denied { getattr } for pid=2668 comm="mysqld" path="/var/lib/mysql/#sql_95c_0.MYI" dev=dm-0 ino=27001795 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231966.353:45): arch=c000003e syscall=6 success=yes exit=0 a0=45180a50 a1=451808f0 a2=451808f0 a3=45180a5b items=0 ppid=2339 pid=2668 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201231966.355:46): avc: denied { remove_name } for pid=2668 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001795 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231966.355:46): avc: denied { unlink } for pid=2668 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001795 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231966.355:46): arch=c000003e syscall=87 success=yes exit=0 a0=4518b7d0 a1=10 a2=4518b5ae a3=0 items=0 ppid=2339 pid=2668 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_AUTH msg=audit(1201231999.600:47): user pid=2999 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201231999.612:48): user pid=2999 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201231999.617:49): user pid=2999 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1201231999.649:50): login pid=2999 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1201231999.668:51): user pid=2999 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201231999.693:52): user pid=2999 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1201231999.694:53): user pid=2999 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=AVC msg=audit(1201231999.755:54): avc: denied { search } for pid=3047 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201231999.755:54): avc: denied { search } for pid=3047 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231999.755:54): avc: denied { read write } for pid=3047 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231999.755:54): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2692 pid=3047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201231999.755:55): avc: denied { lock } for pid=3047 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231999.755:55): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2692 pid=3047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201231999.841:56): avc: denied { getattr } for pid=3047 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231999.841:56): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7fff8138aa00 a2=7fff8138aa00 a3=0 items=0 ppid=2692 pid=3047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201231999.841:57): avc: denied { write } for pid=3047 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231999.841:57): avc: denied { add_name } for pid=3047 comm="hal-acl-tool" name="acl-list.2WGB5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231999.841:57): avc: denied { create } for pid=3047 comm="hal-acl-tool" name="acl-list.2WGB5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231999.841:57): arch=c000003e syscall=2 success=yes exit=5 a0=609500 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2692 pid=3047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201231999.841:58): avc: denied { remove_name } for pid=3047 comm="hal-acl-tool" name="acl-list.2WGB5T" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201231999.841:58): avc: denied { rename } for pid=3047 comm="hal-acl-tool" name="acl-list.2WGB5T" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201231999.841:58): avc: denied { unlink } for pid=3047 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201231999.841:58): arch=c000003e syscall=82 success=yes exit=0 a0=613f50 a1=403ed2 a2=41 a3=31cc1529f0 items=0 ppid=2692 pid=3047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201232119.541:59): avc: denied { setattr } for pid=3467 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201232119.541:59): arch=c000003e syscall=90 success=yes exit=0 a0=7c8860 a1=180 a2=31db561958 a3=6e657473696c5f74 items=0 ppid=1 pid=3467 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201232119.542:60): avc: denied { read } for pid=3467 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201232119.542:60): arch=c000003e syscall=2 success=yes exit=5 a0=2aaab35fcef4 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=3467 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201232152.917:61): avc: denied { write } for pid=3467 comm="setroubleshootd" name="audit_listener_database.xml" dev=dm-0 ino=27001681 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201232152.917:61): arch=c000003e syscall=2 success=yes exit=11 a0=70a9f0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=3467 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1201232278.809:62): avc: denied { write } for pid=2650 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201232278.809:62): arch=c000003e syscall=2 success=yes exit=84 a0=45107e90 a1=2 a2=0 a3=450fd75b items=0 ppid=2339 pid=2650 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201232335.738:63): avc: denied { search } for pid=4335 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232335.738:63): arch=c000003e syscall=21 success=no exit=-2 a0=820d30 a1=4 a2=820d49 a3=415012 items=0 ppid=4334 pid=4335 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232335.758:64): avc: denied { search } for pid=4335 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1201232335.758:64): avc: denied { read } for pid=4335 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067485 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201232335.758:64): arch=c000003e syscall=2 success=yes exit=3 a0=820d30 a1=0 a2=1b6 a3=0 items=0 ppid=4334 pid=4335 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232335.780:65): avc: denied { getattr } for pid=4335 comm="clamav-milter" path="/var/lib/clamav/daily.inc/daily.info" dev=dm-0 ino=27067485 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201232335.780:65): arch=c000003e syscall=5 success=yes exit=0 a0=3 a1=7fff9ae93370 a2=7fff9ae93370 a3=0 items=0 ppid=4334 pid=4335 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232335.787:66): avc: denied { read } for pid=4335 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232335.787:66): arch=c000003e syscall=2 success=yes exit=3 a0=81fb80 a1=90800 a2=31 a3=3fe326d70a items=0 ppid=4334 pid=4335 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232337.318:67): avc: denied { read } for pid=4335 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232337.318:67): arch=c000003e syscall=2 success=yes exit=4 a0=820da0 a1=90800 a2=31 a3=0 items=0 ppid=4334 pid=4335 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232337.318:68): avc: denied { getattr } for pid=4335 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232337.318:68): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9ae93380 a2=7fff9ae93380 a3=0 items=0 ppid=4334 pid=4335 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=pts1 comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232419.129:69): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232419.129:69): arch=c000003e syscall=2 success=yes exit=4 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232419.129:70): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201232419.129:70): arch=c000003e syscall=4 success=yes exit=0 a0=576cd00 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232419.129:71): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232419.129:71): arch=c000003e syscall=4 success=yes exit=0 a0=576cd00 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232436.569:72): avc: denied { search } for pid=5145 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201232436.569:72): avc: denied { search } for pid=5145 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201232436.569:72): avc: denied { read write } for pid=5145 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001809 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201232436.569:72): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2692 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201232436.570:73): avc: denied { lock } for pid=5145 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001809 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201232436.570:73): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2692 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201232436.585:74): avc: denied { getattr } for pid=5145 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001809 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201232436.585:74): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7fffe773cda0 a2=7fffe773cda0 a3=0 items=0 ppid=2692 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201232436.585:75): avc: denied { write } for pid=5145 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201232436.585:75): avc: denied { add_name } for pid=5145 comm="hal-acl-tool" name="acl-list.41154T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201232436.585:75): avc: denied { create } for pid=5145 comm="hal-acl-tool" name="acl-list.41154T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201232436.585:75): arch=c000003e syscall=2 success=yes exit=5 a0=609500 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2692 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201232436.585:76): avc: denied { remove_name } for pid=5145 comm="hal-acl-tool" name="acl-list.41154T" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201232436.585:76): avc: denied { rename } for pid=5145 comm="hal-acl-tool" name="acl-list.41154T" dev=dm-0 ino=27001763 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201232436.585:76): avc: denied { unlink } for pid=5145 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001809 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201232436.585:76): arch=c000003e syscall=82 success=yes exit=0 a0=613f50 a1=403ed2 a2=41 a3=31cc1529f0 items=0 ppid=2692 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=USER_END msg=audit(1201232436.600:77): user pid=2999 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201232436.600:78): user pid=2999 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1201232449.771:79): user pid=2999 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201232449.775:80): user pid=2999 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201232449.780:81): user pid=2999 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1201232449.790:82): login pid=2999 uid=0 old auid=0 new auid=1000 >type=USER_ROLE_CHANGE msg=audit(1201232449.833:83): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201232449.846:84): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1201232449.847:85): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=AVC msg=audit(1201232449.976:86): avc: denied { search } for pid=5195 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201232449.976:86): avc: denied { search } for pid=5195 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232449.976:86): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2692 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201232449.996:87): avc: denied { write } for pid=5195 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201232449.996:87): avc: denied { add_name } for pid=5195 comm="hal-acl-tool" name="acl-list.U0QC5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232449.996:87): arch=c000003e syscall=2 success=yes exit=5 a0=6182c0 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2692 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201232449.996:88): avc: denied { remove_name } for pid=5195 comm="hal-acl-tool" name="acl-list.U0QC5T" dev=dm-0 ino=27001807 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232449.996:88): arch=c000003e syscall=82 success=yes exit=0 a0=6181e0 a1=403ed2 a2=31 a3=22 items=0 ppid=2692 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201232459.129:89): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201232459.129:89): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232459.129:89): arch=c000003e syscall=2 success=yes exit=4 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232459.129:90): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201232459.129:90): arch=c000003e syscall=4 success=yes exit=0 a0=576cd00 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232459.129:91): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232459.129:91): arch=c000003e syscall=4 success=yes exit=0 a0=576cd00 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232559.131:92): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232559.131:92): arch=c000003e syscall=4 success=yes exit=0 a0=576cd00 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232580.027:93): avc: denied { write } for pid=2650 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201232580.027:93): arch=c000003e syscall=2 success=yes exit=84 a0=45107e90 a1=2 a2=0 a3=450fd75b items=0 ppid=2339 pid=2650 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201232589.132:94): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201232589.132:94): arch=c000003e syscall=4 success=yes exit=0 a0=576cd00 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201232596.427:95): user pid=5533 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201232596.429:96): user pid=5533 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201232596.609:97): user pid=5533 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201232596.609:98): user pid=5533 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201232639.132:99): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232639.132:99): arch=c000003e syscall=2 success=yes exit=4 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201232751.988:100): user pid=5752 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1201232751.990:101): user pid=5752 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1201232752.029:102): user pid=5752 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1201232752.029:103): user pid=5752 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1201232789.134:104): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201232789.134:104): arch=c000003e syscall=2 success=yes exit=4 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201232883.240:105): avc: denied { write } for pid=2650 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201232883.240:105): arch=c000003e syscall=2 success=yes exit=84 a0=45107e90 a1=2 a2=0 a3=450fd75b items=0 ppid=2339 pid=2650 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201233661.908:106): user pid=5917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201233661.908:107): user pid=5917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201233661.908:108): login pid=5917 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201233661.947:109): user pid=5917 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201233661.962:110): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201233661.962:110): arch=c000003e syscall=4 success=yes exit=0 a0=576bcd0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201233661.962:111): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201233661.962:111): arch=c000003e syscall=4 success=yes exit=0 a0=576bcd0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201233662.010:112): user pid=5917 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201233662.011:113): user pid=5917 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201233793.857:114): avc: denied { write } for pid=2650 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201233793.857:114): arch=c000003e syscall=2 success=yes exit=84 a0=45107e90 a1=2 a2=0 a3=450fd75b items=0 ppid=2339 pid=2650 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201234424.875:115): avc: denied { getattr } for pid=5981 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201234424.875:115): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=5980 pid=5981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201234424.898:116): avc: denied { search } for pid=5981 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201234424.898:116): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=5980 pid=5981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201234424.909:117): avc: denied { append } for pid=5981 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201234424.909:117): arch=c000003e syscall=2 success=yes exit=4 a0=2f85b60 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=5980 pid=5981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201234424.909:118): avc: denied { ioctl } for pid=5981 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201234424.909:118): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff7bb000b0 a3=31cc1529f0 items=0 ppid=5980 pid=5981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201234424.909:119): avc: denied { getattr } for pid=5981 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201234424.909:119): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=5980 pid=5981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201234424.930:120): avc: denied { getattr } for pid=5981 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201234424.930:120): arch=c000003e syscall=6 success=yes exit=0 a0=2f8a330 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=5980 pid=5981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201234424.930:121): avc: denied { read } for pid=5981 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201234424.930:121): arch=c000003e syscall=89 success=yes exit=17 a0=2f8a330 a1=7fff7baff4f0 a2=fff a3=31cc1529f0 items=0 ppid=5980 pid=5981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201234424.931:122): avc: denied { read } for pid=5981 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201234424.931:122): arch=c000003e syscall=2 success=yes exit=7 a0=2f9de30 a1=0 a2=0 a3=3b162f5170 items=0 ppid=5980 pid=5981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201234424.943:123): avc: denied { read } for pid=5981 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201234424.943:123): arch=c000003e syscall=2 success=yes exit=7 a0=2f85430 a1=90800 a2=0 a3=9 items=0 ppid=5980 pid=5981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1201235055.023:124): user pid=5752 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201235055.024:125): user pid=5752 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1201235056.060:126): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201235056.060:126): arch=c000003e syscall=2 success=yes exit=4 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201235064.210:127): user pid=5533 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1201235064.210:128): user pid=5533 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201235080.339:129): avc: denied { write } for pid=2502 comm="httpd" name="mysql.sock" dev=dm-0 ino=27001699 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201235080.339:129): arch=c000003e syscall=42 success=yes exit=0 a0=11 a1=7fff1257f970 a2=6e a3=2aaab9cae5fa items=0 ppid=2490 pid=2502 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1201235096.060:130): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201235096.060:130): arch=c000003e syscall=2 success=yes exit=4 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201235121.563:131): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201235121.563:131): arch=c000003e syscall=4 success=yes exit=0 a0=576bcd0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201235151.563:132): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201235151.563:132): arch=c000003e syscall=4 success=yes exit=0 a0=576bcd0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201235309.891:133): avc: denied { write } for pid=2650 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201235309.891:133): arch=c000003e syscall=2 success=yes exit=84 a0=45107e90 a1=2 a2=0 a3=450fd75b items=0 ppid=2339 pid=2650 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_AUTH msg=audit(1201235318.734:134): user pid=6254 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201235318.737:135): user pid=6254 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201235318.785:136): user pid=6254 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201235318.786:137): user pid=6254 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201235554.415:138): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201235554.415:138): avc: denied { write } for pid=2231 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201235554.415:138): avc: denied { add_name } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201235554.415:138): avc: denied { create } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201235554.415:138): avc: denied { write } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001807 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201235554.415:138): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201235554.415:139): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001807 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201235554.415:139): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe4a257b0 a2=7fffe4a257b0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201235554.415:140): avc: denied { remove_name } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001807 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201235554.415:140): avc: denied { rename } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001807 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201235554.415:140): avc: denied { unlink } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201235554.415:140): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201236503.870:141): user pid=6254 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1201236503.870:142): user pid=6254 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201236522.787:143): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201236522.787:143): arch=c000003e syscall=2 success=yes exit=4 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201236535.593:144): user pid=6403 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201236535.595:145): user pid=6403 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201236535.640:146): user pid=6403 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201236535.640:147): user pid=6403 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201236570.149:148): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201236570.149:148): arch=c000003e syscall=2 success=yes exit=4 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201236634.416:149): avc: denied { write } for pid=6528 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201236634.416:149): avc: denied { add_name } for pid=6528 comm="mysqld" name="#sql_95c_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201236634.416:149): avc: denied { create } for pid=6528 comm="mysqld" name="#sql_95c_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201236634.416:149): avc: denied { read write } for pid=6528 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201236634.416:149): arch=c000003e syscall=2 success=yes exit=99 a0=4518b0a0 a1=202c2 a2=1b0 a3=45188bab items=0 ppid=2339 pid=6528 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201236634.417:150): avc: denied { getattr } for pid=6528 comm="mysqld" path="/var/lib/mysql/#sql_95c_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201236634.417:150): arch=c000003e syscall=6 success=yes exit=0 a0=45180a50 a1=451808f0 a2=451808f0 a3=45180a5b items=0 ppid=2339 pid=6528 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201236634.418:151): avc: denied { remove_name } for pid=6528 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201236634.418:151): avc: denied { unlink } for pid=6528 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201236634.418:151): arch=c000003e syscall=87 success=yes exit=0 a0=4518b7d0 a1=10 a2=4518b5ae a3=0 items=0 ppid=2339 pid=6528 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201236634.988:152): avc: denied { write } for pid=2501 comm="httpd" name="mysql.sock" dev=dm-0 ino=27001699 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201236634.988:152): arch=c000003e syscall=42 success=yes exit=0 a0=11 a1=7fff1257f970 a2=6e a3=2aaab9cae5fa items=0 ppid=2490 pid=2501 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1201236638.458:153): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201236638.458:153): arch=c000003e syscall=4 success=yes exit=0 a0=576bcd0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201236758.459:154): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201236758.459:154): arch=c000003e syscall=4 success=yes exit=0 a0=576bcd0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201236948.245:155): avc: denied { write } for pid=6520 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201236948.245:155): arch=c000003e syscall=2 success=yes exit=104 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2339 pid=6520 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201237201.026:156): user pid=6720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201237201.026:157): user pid=6720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201237201.027:158): login pid=6720 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201237201.071:159): user pid=6720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201237259.668:160): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201237259.668:160): arch=c000003e syscall=2 success=yes exit=4 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201237261.026:161): user pid=6739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201237261.026:162): user pid=6739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201237261.026:163): login pid=6739 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201237261.065:164): user pid=6739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201237261.084:165): user pid=6739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201237261.085:166): user pid=6739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201237498.312:167): user pid=6403 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1201237498.313:168): user pid=6403 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201237584.346:169): avc: denied { search } for pid=6855 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201237584.346:169): avc: denied { search } for pid=6855 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201237584.346:169): avc: denied { read write } for pid=6855 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001809 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201237584.346:169): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2692 pid=6855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201237584.347:170): avc: denied { lock } for pid=6855 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001809 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201237584.347:170): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2692 pid=6855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=USER_END msg=audit(1201237584.355:171): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201237584.355:172): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1201237584.381:173): avc: denied { getattr } for pid=6855 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001809 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201237584.381:173): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7fffbd73dda0 a2=7fffbd73dda0 a3=0 items=0 ppid=2692 pid=6855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201237584.381:174): avc: denied { write } for pid=6855 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201237584.381:174): avc: denied { add_name } for pid=6855 comm="hal-acl-tool" name="acl-list.SQLL5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201237584.381:174): avc: denied { create } for pid=6855 comm="hal-acl-tool" name="acl-list.SQLL5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201237584.381:174): arch=c000003e syscall=2 success=yes exit=5 a0=610ef0 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2692 pid=6855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201237584.382:175): avc: denied { remove_name } for pid=6855 comm="hal-acl-tool" name="acl-list.SQLL5T" dev=dm-0 ino=27001795 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201237584.382:175): avc: denied { rename } for pid=6855 comm="hal-acl-tool" name="acl-list.SQLL5T" dev=dm-0 ino=27001795 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201237584.382:175): avc: denied { unlink } for pid=6855 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001809 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201237584.382:175): arch=c000003e syscall=82 success=yes exit=0 a0=6141b0 a1=403ed2 a2=41 a3=31cc1529f0 items=0 ppid=2692 pid=6855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201237586.392:176): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201237586.392:176): arch=c000003e syscall=2 success=yes exit=4 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201237586.392:177): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201237586.392:177): arch=c000003e syscall=4 success=yes exit=0 a0=576bcd0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201237586.392:178): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201237586.392:178): arch=c000003e syscall=4 success=yes exit=0 a0=576bcd0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201237855.896:179): avc: denied { write } for pid=6520 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201237855.896:179): arch=c000003e syscall=2 success=yes exit=104 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2339 pid=6520 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201239154.415:180): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201239154.415:180): avc: denied { write } for pid=2231 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201239154.415:180): avc: denied { add_name } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201239154.415:180): avc: denied { create } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201239154.415:180): avc: denied { write } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201239154.415:180): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201239154.415:181): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201239154.415:181): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe4a257b0 a2=7fffe4a257b0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201239154.415:182): avc: denied { remove_name } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201239154.415:182): avc: denied { rename } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201239154.415:182): avc: denied { unlink } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001807 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201239154.415:182): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201239171.154:183): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201239171.154:183): arch=c000003e syscall=2 success=yes exit=6 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201239411.012:184): avc: denied { getattr } for pid=7011 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201239411.012:184): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7010 pid=7011 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201239411.012:185): avc: denied { search } for pid=7011 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201239411.012:185): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7010 pid=7011 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201239411.013:186): avc: denied { append } for pid=7011 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201239411.013:186): arch=c000003e syscall=2 success=yes exit=4 a0=2f5f450 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=7010 pid=7011 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201239411.013:187): avc: denied { ioctl } for pid=7011 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201239411.013:187): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff3e5deb90 a3=31cc1529f0 items=0 ppid=7010 pid=7011 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201239411.013:188): avc: denied { getattr } for pid=7011 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201239411.013:188): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=7010 pid=7011 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201239411.013:189): avc: denied { getattr } for pid=7011 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201239411.013:189): arch=c000003e syscall=6 success=yes exit=0 a0=2f62c20 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7010 pid=7011 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201239411.013:190): avc: denied { read } for pid=7011 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201239411.013:190): arch=c000003e syscall=89 success=yes exit=17 a0=2f62c20 a1=7fff3e5ddfd0 a2=fff a3=31cc1529f0 items=0 ppid=7010 pid=7011 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201239411.015:191): avc: denied { read } for pid=7011 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201239411.015:191): arch=c000003e syscall=2 success=yes exit=7 a0=2f67490 a1=0 a2=0 a3=3b162f5170 items=0 ppid=7010 pid=7011 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201239411.016:192): avc: denied { read } for pid=7011 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201239411.016:192): arch=c000003e syscall=2 success=yes exit=7 a0=2f5ed20 a1=90800 a2=0 a3=9 items=0 ppid=7010 pid=7011 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201240861.099:193): user pid=7098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201240861.100:194): user pid=7098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201240861.100:195): login pid=7098 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201240861.142:196): user pid=7098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201240861.166:197): user pid=7098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201240861.166:198): user pid=7098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201240864.231:199): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201240864.231:199): arch=c000003e syscall=2 success=yes exit=5 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201240920.938:200): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201240920.938:200): arch=c000003e syscall=4 success=yes exit=0 a0=576c4a0 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201240940.938:201): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201240940.938:201): arch=c000003e syscall=4 success=yes exit=0 a0=576bcd0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201241200.220:202): avc: denied { write } for pid=6520 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201241200.220:202): arch=c000003e syscall=2 success=yes exit=104 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2339 pid=6520 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201241884.984:203): avc: denied { getattr } for pid=7229 comm="spamassassin" path="/home/phighley/.razor/identity" dev=dm-2 ino=22528024 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201241884.984:203): arch=c000003e syscall=6 success=yes exit=0 a0=2e8bb40 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7228 pid=7229 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201241884.984:204): avc: denied { read } for pid=7229 comm="spamassassin" name="identity" dev=dm-2 ino=22528024 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201241884.984:204): arch=c000003e syscall=89 success=yes exit=17 a0=2e8bb40 a1=7fff7f138b30 a2=fff a3=31cc1529f0 items=0 ppid=7228 pid=7229 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201241885.419:205): avc: denied { write } for pid=7229 comm="spamassassin" name="server.c304.cloudmark.com.conf" dev=dm-2 ino=22528038 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201241885.419:205): arch=c000003e syscall=2 success=yes exit=9 a0=2ebe3e0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=7228 pid=7229 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201241885.704:206): avc: denied { write } for pid=7229 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201241885.704:206): avc: denied { add_name } for pid=7229 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201241885.704:206): avc: denied { create } for pid=7229 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201241885.704:206): arch=c000003e syscall=2 success=yes exit=10 a0=2ec3170 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=7228 pid=7229 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201241885.704:207): avc: denied { remove_name } for pid=7229 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201241885.704:207): avc: denied { unlink } for pid=7229 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201241885.704:207): arch=c000003e syscall=87 success=yes exit=0 a0=2ec3030 a1=1f35a50 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=7228 pid=7229 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201242754.414:208): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201242754.414:208): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201244461.180:209): user pid=7429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201244461.180:210): user pid=7429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201244461.180:211): login pid=7429 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201244461.220:212): user pid=7429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201244461.240:213): user pid=7429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201244461.241:214): user pid=7429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201245188.888:215): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201245188.888:215): arch=c000003e syscall=2 success=yes exit=5 a0=4d5aa80 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201245189.591:216): user pid=6720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201245189.591:217): user pid=6720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201245198.888:218): avc: denied { read } for pid=4338 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067529 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201245198.888:218): arch=c000003e syscall=2 success=yes exit=5 a0=576c6e0 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201245200.263:219): avc: denied { read } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201245200.263:219): arch=c000003e syscall=2 success=yes exit=6 a0=576c660 a1=90800 a2=31 a3=0 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201245200.263:220): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201245200.263:220): arch=c000003e syscall=5 success=yes exit=0 a0=6 a1=409ffd40 a2=409ffd40 a3=0 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201246354.415:221): avc: denied { write } for pid=2231 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201246354.415:221): avc: denied { add_name } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201246354.415:221): avc: denied { create } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201246354.415:221): avc: denied { write } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201246354.415:221): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201246354.415:222): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201246354.415:222): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe4a257b0 a2=7fffe4a257b0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201246354.415:223): avc: denied { remove_name } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201246354.415:223): avc: denied { rename } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201246354.415:223): avc: denied { unlink } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201246354.415:223): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201247391.510:224): avc: denied { getattr } for pid=7668 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201247391.510:224): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7667 pid=7668 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201247391.510:225): avc: denied { search } for pid=7668 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201247391.510:225): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=7667 pid=7668 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201247391.511:226): avc: denied { append } for pid=7668 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201247391.511:226): arch=c000003e syscall=2 success=yes exit=4 a0=2ec7170 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=7667 pid=7668 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201247391.511:227): avc: denied { ioctl } for pid=7668 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201247391.511:227): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff13d022b0 a3=31cc1529f0 items=0 ppid=7667 pid=7668 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201247391.511:228): avc: denied { getattr } for pid=7668 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201247391.511:228): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=7667 pid=7668 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201247391.512:229): avc: denied { read } for pid=7668 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201247391.512:229): arch=c000003e syscall=2 success=yes exit=7 a0=2ed30d0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=7667 pid=7668 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201247391.513:230): avc: denied { read } for pid=7668 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201247391.513:230): arch=c000003e syscall=2 success=yes exit=7 a0=2ec6a90 a1=90800 a2=0 a3=9 items=0 ppid=7667 pid=7668 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201248001.601:231): user pid=7714 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201248001.602:232): user pid=7714 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201248001.602:233): login pid=7714 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201248001.643:234): user pid=7714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201248001.776:235): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201248001.776:235): arch=c000003e syscall=2 success=yes exit=5 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201248061.601:236): user pid=7746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201248061.602:237): user pid=7746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201248061.602:238): login pid=7746 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201248061.643:239): user pid=7746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201248061.663:240): user pid=7746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201248061.664:241): user pid=7746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201248630.610:242): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201248630.610:242): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201249954.415:243): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201249954.415:243): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201249971.149:244): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201249971.149:244): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201250009.179:245): avc: denied { write } for pid=6520 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201250009.179:245): arch=c000003e syscall=2 success=yes exit=104 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2339 pid=6520 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201251661.675:246): user pid=7972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201251661.675:247): user pid=7972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201251661.676:248): login pid=7972 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201251661.718:249): user pid=7972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201251661.739:250): user pid=7972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201251661.739:251): user pid=7972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201253829.433:252): avc: denied { getattr } for pid=8144 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201253829.433:252): arch=c000003e syscall=6 success=yes exit=0 a0=2fea5d0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=8143 pid=8144 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201253829.433:253): avc: denied { read } for pid=8144 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201253829.433:253): arch=c000003e syscall=89 success=yes exit=17 a0=2fea5d0 a1=7fff48326d20 a2=fff a3=31cc1529f0 items=0 ppid=8143 pid=8144 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201255261.751:254): user pid=8264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201255261.752:255): user pid=8264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201255261.752:256): login pid=8264 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201255261.795:257): user pid=8264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201255261.814:258): user pid=8264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201255261.815:259): user pid=8264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201255987.730:260): user pid=7714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201255987.730:261): user pid=7714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201255995.875:262): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201255995.875:262): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201257154.415:263): avc: denied { write } for pid=2231 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201257154.415:263): avc: denied { add_name } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201257154.415:263): avc: denied { create } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201257154.415:263): avc: denied { write } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201257154.415:263): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201257154.415:264): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201257154.415:264): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe4a257b0 a2=7fffe4a257b0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201257154.415:265): avc: denied { remove_name } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201257154.415:265): avc: denied { rename } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201257154.415:265): avc: denied { unlink } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201257154.415:265): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201258801.740:266): user pid=8493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201258801.741:267): user pid=8493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201258801.741:268): login pid=8493 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201258801.783:269): user pid=8493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201258861.741:270): user pid=8520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201258861.742:271): user pid=8520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201258861.742:272): login pid=8520 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201258861.784:273): user pid=8520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201258861.804:274): user pid=8520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201258861.805:275): user pid=8520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201260053.178:276): avc: denied { getattr } for pid=8612 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201260053.178:276): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=8611 pid=8612 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201260053.178:277): avc: denied { search } for pid=8612 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201260053.178:277): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=8611 pid=8612 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201260053.178:278): avc: denied { append } for pid=8612 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201260053.178:278): arch=c000003e syscall=2 success=yes exit=4 a0=2e7e410 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=8611 pid=8612 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201260053.178:279): avc: denied { ioctl } for pid=8612 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201260053.178:279): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff320f86b0 a3=31cc1529f0 items=0 ppid=8611 pid=8612 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201260053.178:280): avc: denied { getattr } for pid=8612 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201260053.178:280): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=8611 pid=8612 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201260053.179:281): avc: denied { read } for pid=8612 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201260053.179:281): arch=c000003e syscall=2 success=yes exit=7 a0=2e88030 a1=0 a2=0 a3=3b162f5170 items=0 ppid=8611 pid=8612 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201260053.180:282): avc: denied { read } for pid=8612 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201260053.180:282): arch=c000003e syscall=2 success=yes exit=7 a0=2e7dce0 a1=90800 a2=0 a3=9 items=0 ppid=8611 pid=8612 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201260062.103:283): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201260062.103:283): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201260754.415:284): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201260754.415:284): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201260861.944:285): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201260861.944:285): arch=c000003e syscall=4 success=yes exit=0 a0=576d180 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201260861.944:286): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201260861.944:286): arch=c000003e syscall=4 success=yes exit=0 a0=576d180 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201260863.449:287): avc: denied { write } for pid=8669 comm="spamassassin" name="server.c301.cloudmark.com.conf" dev=dm-2 ino=22528039 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201260863.449:287): arch=c000003e syscall=2 success=yes exit=9 a0=2ecbca0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=8668 pid=8669 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201260863.659:288): avc: denied { write } for pid=8669 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201260863.659:288): avc: denied { add_name } for pid=8669 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201260863.659:288): avc: denied { create } for pid=8669 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201260863.659:288): arch=c000003e syscall=2 success=yes exit=10 a0=2ecfa60 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=8668 pid=8669 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201260863.659:289): avc: denied { remove_name } for pid=8669 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201260863.659:289): avc: denied { unlink } for pid=8669 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201260863.659:289): arch=c000003e syscall=87 success=yes exit=0 a0=2ecf830 a1=1f35ac0 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=8668 pid=8669 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201260941.483:290): avc: denied { write } for pid=6520 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201260941.483:290): arch=c000003e syscall=2 success=yes exit=104 a0=450c6e90 a1=2 a2=0 a3=450bc75b items=0 ppid=2339 pid=6520 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201262461.818:291): user pid=8805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201262461.819:292): user pid=8805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201262461.819:293): login pid=8805 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201262461.863:294): user pid=8805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201262461.885:295): user pid=8805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201262461.886:296): user pid=8805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201262521.891:297): user pid=8834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201262521.891:298): user pid=8834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201262521.891:299): login pid=8834 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201262521.934:300): user pid=8834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201264612.059:301): avc: denied { write } for pid=8976 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201264612.059:301): avc: denied { add_name } for pid=8976 comm="mysqld" name="#sql_95c_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201264612.059:301): avc: denied { create } for pid=8976 comm="mysqld" name="#sql_95c_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201264612.059:301): avc: denied { read write } for pid=8976 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201264612.059:301): arch=c000003e syscall=2 success=yes exit=137 a0=4520d0a0 a1=202c2 a2=1b0 a3=4520abab items=0 ppid=2339 pid=8976 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201264612.060:302): avc: denied { getattr } for pid=8976 comm="mysqld" path="/var/lib/mysql/#sql_95c_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201264612.060:302): arch=c000003e syscall=6 success=yes exit=0 a0=45202a50 a1=452028f0 a2=452028f0 a3=45202a5b items=0 ppid=2339 pid=8976 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201264612.060:303): avc: denied { remove_name } for pid=8976 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201264612.060:303): avc: denied { unlink } for pid=8976 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201264612.060:303): arch=c000003e syscall=87 success=yes exit=0 a0=4520d7d0 a1=10 a2=4520d5ae a3=0 items=0 ppid=2339 pid=8976 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1201264616.999:304): auid=1000 uid=0 gid=0 subj=system_u:system_r:initrc_t:s0 pid=8990 comm="mythfilldatabas" sig=11 >type=AVC msg=audit(1201264617.099:305): avc: denied { write } for pid=6528 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201264617.099:305): avc: denied { add_name } for pid=6528 comm="mysqld" name="#sql_95c_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201264617.099:305): avc: denied { create } for pid=6528 comm="mysqld" name="#sql_95c_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201264617.099:305): avc: denied { read write } for pid=6528 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201264617.099:305): arch=c000003e syscall=2 success=yes exit=104 a0=4518b0a0 a1=202c2 a2=1b0 a3=45188bab items=0 ppid=2339 pid=6528 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201264617.100:306): avc: denied { getattr } for pid=6528 comm="mysqld" path="/var/lib/mysql/#sql_95c_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201264617.100:306): arch=c000003e syscall=6 success=yes exit=0 a0=45180a50 a1=451808f0 a2=451808f0 a3=45180a5b items=0 ppid=2339 pid=6528 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201264617.101:307): avc: denied { remove_name } for pid=6528 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201264617.101:307): avc: denied { unlink } for pid=6528 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001806 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201264617.101:307): arch=c000003e syscall=87 success=yes exit=0 a0=4518b7d0 a1=10 a2=4518b5ae a3=0 items=0 ppid=2339 pid=6528 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201265886.047:308): avc: denied { search } for pid=9062 comm="webalizer" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:webalizer_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201265886.047:308): avc: denied { getattr } for pid=9062 comm="webalizer" path="/var/lib/webalizer/dns_cache.db" dev=dm-0 ino=27001732 scontext=system_u:system_r:webalizer_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201265886.047:308): arch=c000003e syscall=4 success=yes exit=0 a0=8244e0 a1=7fff9b713b30 a2=7fff9b713b30 a3=61 items=0 ppid=8845 pid=9062 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="webalizer" exe="/usr/bin/webalizer" subj=system_u:system_r:webalizer_t:s0 key=(null) >type=AVC msg=audit(1201265886.067:309): avc: denied { read write } for pid=9062 comm="webalizer" name="dns_cache.db" dev=dm-0 ino=27001732 scontext=system_u:system_r:webalizer_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201265886.067:309): arch=c000003e syscall=2 success=yes exit=4 a0=826270 a1=2 a2=0 a3=62642e65686361 items=0 ppid=8845 pid=9062 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="webalizer" exe="/usr/bin/webalizer" subj=system_u:system_r:webalizer_t:s0 key=(null) >type=AVC msg=audit(1201265886.072:310): avc: denied { lock } for pid=9062 comm="webalizer" path="/var/lib/webalizer/dns_cache.db" dev=dm-0 ino=27001732 scontext=system_u:system_r:webalizer_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201265886.072:310): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=6 a2=7fff9b713c70 a3=0 items=0 ppid=8845 pid=9062 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="webalizer" exe="/usr/bin/webalizer" subj=system_u:system_r:webalizer_t:s0 key=(null) >type=AVC msg=audit(1201265889.116:311): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201265889.116:311): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201265899.116:312): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201265899.116:312): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201265939.117:313): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201265939.117:313): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201265939.117:314): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201265939.117:314): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201265957.376:315): user pid=8834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201265957.376:316): user pid=8834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201266061.383:317): user pid=10120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201266061.384:318): user pid=10120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201266061.384:319): login pid=10120 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201266061.427:320): user pid=10120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201266061.448:321): user pid=10120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201266061.449:322): user pid=10120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201266069.118:323): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201266069.118:323): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201266097.602:324): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201266097.602:324): arch=c000003e syscall=2 success=yes exit=104 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=CRED_DISP msg=audit(1201266788.007:325): user pid=8493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201266788.008:326): user pid=8493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201267813.614:327): avc: denied { getattr } for pid=10241 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201267813.614:327): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10240 pid=10241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201267813.614:328): avc: denied { search } for pid=10241 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201267813.614:328): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10240 pid=10241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201267813.615:329): avc: denied { append } for pid=10241 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201267813.615:329): arch=c000003e syscall=2 success=yes exit=4 a0=2e65b00 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=10240 pid=10241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201267813.615:330): avc: denied { ioctl } for pid=10241 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201267813.615:330): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffed3de990 a3=31cc1529f0 items=0 ppid=10240 pid=10241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201267813.615:331): avc: denied { getattr } for pid=10241 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201267813.615:331): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=10240 pid=10241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201267813.615:332): avc: denied { getattr } for pid=10241 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201267813.615:332): arch=c000003e syscall=6 success=yes exit=0 a0=2e692d0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10240 pid=10241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201267813.615:333): avc: denied { read } for pid=10241 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201267813.615:333): arch=c000003e syscall=89 success=yes exit=17 a0=2e692d0 a1=7fffed3dddd0 a2=fff a3=31cc1529f0 items=0 ppid=10240 pid=10241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201267813.615:334): avc: denied { read } for pid=10241 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201267813.615:334): arch=c000003e syscall=2 success=yes exit=7 a0=2e6b670 a1=0 a2=0 a3=3b162f5170 items=0 ppid=10240 pid=10241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201267813.617:335): avc: denied { read } for pid=10241 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201267813.617:335): arch=c000003e syscall=2 success=yes exit=7 a0=2e65420 a1=90800 a2=0 a3=9 items=0 ppid=10240 pid=10241 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201267818.489:336): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201267818.489:336): arch=c000003e syscall=2 success=yes exit=5 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201267954.415:337): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201267954.415:337): avc: denied { write } for pid=2231 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201267954.415:337): avc: denied { add_name } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201267954.415:337): avc: denied { create } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201267954.415:337): avc: denied { write } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201267954.415:337): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201267954.415:338): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201267954.415:338): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe4a257b0 a2=7fffe4a257b0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201267954.415:339): avc: denied { remove_name } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201267954.415:339): avc: denied { rename } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201267954.415:339): avc: denied { unlink } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201267954.415:339): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201267968.491:340): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201267968.491:340): arch=c000003e syscall=4 success=yes exit=0 a0=4d5ac60 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201267968.491:341): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201267968.491:341): arch=c000003e syscall=4 success=yes exit=0 a0=4d5ac60 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201268088.864:342): avc: denied { getattr } for pid=10268 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201268088.864:342): arch=c000003e syscall=6 success=yes exit=0 a0=2eb46b0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10267 pid=10268 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201268088.864:343): avc: denied { read } for pid=10268 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201268088.864:343): arch=c000003e syscall=89 success=yes exit=17 a0=2eb46b0 a1=7fffe9a023f0 a2=fff a3=31cc1529f0 items=0 ppid=10267 pid=10268 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201268216.062:344): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201268216.062:344): arch=c000003e syscall=2 success=yes exit=104 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201269601.021:345): user pid=10382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201269601.022:346): user pid=10382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201269601.022:347): login pid=10382 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201269601.062:348): user pid=10382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201269661.020:349): user pid=10397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201269661.021:350): user pid=10397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201269661.021:351): login pid=10397 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201269661.059:352): user pid=10397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201269661.080:353): user pid=10397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201269661.081:354): user pid=10397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201271554.415:355): avc: denied { write } for pid=2231 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201271554.415:355): avc: denied { add_name } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201271554.415:355): avc: denied { create } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201271554.415:355): avc: denied { write } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201271554.415:355): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201271554.415:356): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201271554.415:356): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe4a257b0 a2=7fffe4a257b0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201271554.415:357): avc: denied { remove_name } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201271554.415:357): avc: denied { rename } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201271554.415:357): avc: denied { unlink } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201271554.415:357): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201271560.577:358): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201271560.577:358): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201271688.301:359): avc: denied { write } for pid=2296 comm="rpc.mountd" name="control" dev=tmpfs ino=257 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201271688.301:359): arch=c000003e syscall=2 success=yes exit=11 a0=7fff48e82be0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201271842.428:360): user pid=10587 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201271842.432:361): user pid=10587 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201271842.452:362): user pid=10587 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1201271842.497:363): login pid=10587 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201271842.498:364): user pid=10587 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201271842.515:365): user pid=10602 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=CRED_REFR msg=audit(1201271842.523:366): user pid=10602 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1201271847.629:367): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201271847.629:367): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201271847.629:368): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201271847.629:368): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201271847.630:369): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201271847.630:369): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201271854.557:370): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201271854.557:370): arch=c000003e syscall=2 success=yes exit=104 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201271885.105:371): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201271885.105:371): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201272587.329:372): avc: denied { getattr } for pid=10697 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201272587.329:372): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10696 pid=10697 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201272587.329:373): avc: denied { search } for pid=10697 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201272587.329:373): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10696 pid=10697 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201272587.329:374): avc: denied { append } for pid=10697 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201272587.329:374): arch=c000003e syscall=2 success=yes exit=4 a0=2e96a80 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=10696 pid=10697 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201272587.329:375): avc: denied { ioctl } for pid=10697 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201272587.329:375): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff42c7c230 a3=31cc1529f0 items=0 ppid=10696 pid=10697 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201272587.329:376): avc: denied { getattr } for pid=10697 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201272587.329:376): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=10696 pid=10697 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201272587.330:377): avc: denied { getattr } for pid=10697 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201272587.330:377): arch=c000003e syscall=6 success=yes exit=0 a0=2e9a250 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10696 pid=10697 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201272587.330:378): avc: denied { read } for pid=10697 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201272587.330:378): arch=c000003e syscall=89 success=yes exit=17 a0=2e9a250 a1=7fff42c7b670 a2=fff a3=31cc1529f0 items=0 ppid=10696 pid=10697 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201272587.331:379): avc: denied { read } for pid=10697 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201272587.331:379): arch=c000003e syscall=2 success=yes exit=7 a0=2e9d350 a1=0 a2=0 a3=3b162f5170 items=0 ppid=10696 pid=10697 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201272587.332:380): avc: denied { read } for pid=10697 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201272587.332:380): arch=c000003e syscall=2 success=yes exit=7 a0=2e96350 a1=90800 a2=0 a3=9 items=0 ppid=10696 pid=10697 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201272626.177:381): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201272626.177:381): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201272767.052:382): user pid=10587 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1201272767.053:383): user pid=10587 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1201272905.115:384): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201272905.115:384): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201273217.156:385): user pid=10771 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201273217.168:386): user pid=10771 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1201273217.184:387): login pid=10771 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1201273217.185:388): user pid=10771 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201273217.193:389): user pid=10779 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201273217.212:390): user pid=10771 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=AVC msg=audit(1201273220.342:391): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201273220.342:391): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201273220.342:392): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201273220.342:392): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201273261.094:393): user pid=10824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201273261.095:394): user pid=10824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201273261.095:395): login pid=10824 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201273261.149:396): user pid=10824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201273261.172:397): user pid=10824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201273261.172:398): user pid=10824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201273270.342:399): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201273270.342:399): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201273368.620:400): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201273368.620:400): arch=c000003e syscall=2 success=yes exit=104 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_AUTH msg=audit(1201273561.813:401): user pid=10877 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201273561.815:402): user pid=10877 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201273561.869:403): user pid=10877 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201273561.870:404): user pid=10877 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201273568.549:405): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201273568.549:405): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201273568.549:406): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201273568.549:406): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201273681.197:407): user pid=10877 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1201273681.198:408): user pid=10877 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1201273682.663:409): user pid=10771 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1201273682.663:410): user pid=10771 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1201273976.041:411): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201273976.041:411): arch=c000003e syscall=2 success=yes exit=104 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201274071.255:412): avc: denied { getattr } for pid=10979 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201274071.255:412): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10978 pid=10979 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201274071.255:413): avc: denied { search } for pid=10979 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201274071.255:413): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10978 pid=10979 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201274071.255:414): avc: denied { append } for pid=10979 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201274071.255:414): arch=c000003e syscall=2 success=yes exit=4 a0=2e8bb10 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=10978 pid=10979 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201274071.255:415): avc: denied { ioctl } for pid=10979 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201274071.255:415): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff0d1ac760 a3=31cc1529f0 items=0 ppid=10978 pid=10979 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201274071.255:416): avc: denied { getattr } for pid=10979 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201274071.255:416): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=10978 pid=10979 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201274071.255:417): avc: denied { getattr } for pid=10979 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201274071.255:417): arch=c000003e syscall=6 success=yes exit=0 a0=2e8f2e0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=10978 pid=10979 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201274071.255:418): avc: denied { read } for pid=10979 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201274071.255:418): arch=c000003e syscall=89 success=yes exit=17 a0=2e8f2e0 a1=7fff0d1abba0 a2=fff a3=31cc1529f0 items=0 ppid=10978 pid=10979 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201274071.256:419): avc: denied { read } for pid=10979 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201274071.256:419): arch=c000003e syscall=2 success=yes exit=7 a0=2e93850 a1=0 a2=0 a3=3b162f5170 items=0 ppid=10978 pid=10979 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201274071.257:420): avc: denied { read } for pid=10979 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201274071.257:420): arch=c000003e syscall=2 success=yes exit=7 a0=2e8b3e0 a1=90800 a2=0 a3=9 items=0 ppid=10978 pid=10979 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201274341.974:421): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201274341.974:421): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201275154.415:422): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201275154.415:422): avc: denied { write } for pid=2231 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201275154.415:422): avc: denied { add_name } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201275154.415:422): avc: denied { create } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201275154.415:422): avc: denied { write } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201275154.415:422): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201275154.415:423): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201275154.415:423): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe4a257b0 a2=7fffe4a257b0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201275154.415:424): avc: denied { remove_name } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201275154.415:424): avc: denied { rename } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201275154.415:424): avc: denied { unlink } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201275154.415:424): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201275280.356:425): avc: denied { getattr } for pid=11064 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201275280.356:425): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=11063 pid=11064 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201275280.356:426): avc: denied { search } for pid=11064 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201275280.356:426): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=11063 pid=11064 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201275280.357:427): avc: denied { append } for pid=11064 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201275280.357:427): arch=c000003e syscall=2 success=yes exit=4 a0=2e88b40 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=11063 pid=11064 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201275280.357:428): avc: denied { ioctl } for pid=11064 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201275280.357:428): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffd994cf00 a3=31cc1529f0 items=0 ppid=11063 pid=11064 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201275280.357:429): avc: denied { getattr } for pid=11064 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201275280.357:429): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=11063 pid=11064 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201275280.358:430): avc: denied { read } for pid=11064 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201275280.358:430): arch=c000003e syscall=2 success=yes exit=7 a0=2e8f5a0 a1=0 a2=0 a3=3b162f5170 items=0 ppid=11063 pid=11064 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201275280.359:431): avc: denied { read } for pid=11064 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201275280.359:431): arch=c000003e syscall=2 success=yes exit=7 a0=2e88410 a1=90800 a2=0 a3=9 items=0 ppid=11063 pid=11064 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201276861.185:432): user pid=11152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201276861.185:433): user pid=11152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201276861.186:434): login pid=11152 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201276861.240:435): user pid=11152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201276861.265:436): user pid=11152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201276861.265:437): user pid=11152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201276865.127:438): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201276865.127:438): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201277587.289:439): user pid=10382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201277587.290:440): user pid=10382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201277587.832:441): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201277587.832:441): arch=c000003e syscall=4 success=yes exit=0 a0=820d30 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201277817.181:442): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201277817.181:442): arch=c000003e syscall=4 success=yes exit=0 a0=4d5abc0 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201277928.741:443): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201277928.741:443): arch=c000003e syscall=2 success=yes exit=104 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201278754.415:444): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201278754.415:444): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201278867.413:445): avc: denied { getattr } for pid=11298 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201278867.413:445): arch=c000003e syscall=6 success=yes exit=0 a0=2ed42b0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=11297 pid=11298 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201278867.413:446): avc: denied { read } for pid=11298 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201278867.413:446): arch=c000003e syscall=89 success=yes exit=17 a0=2ed42b0 a1=7fffc0d4f740 a2=fff a3=31cc1529f0 items=0 ppid=11297 pid=11298 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201280401.303:447): user pid=11398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201280401.303:448): user pid=11398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201280401.303:449): login pid=11398 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201280401.355:450): user pid=11398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201280461.302:451): user pid=11415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201280461.303:452): user pid=11415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201280461.303:453): login pid=11415 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201280461.352:454): user pid=11415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201280461.372:455): user pid=11415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201280461.373:456): user pid=11415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201280461.762:457): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201280461.762:457): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201281946.325:458): avc: denied { write } for pid=11562 comm="spamassassin" name="server.c301.cloudmark.com.conf" dev=dm-2 ino=120127858 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201281946.325:458): arch=c000003e syscall=2 success=yes exit=9 a0=2e99f60 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=11561 pid=11562 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201281946.713:459): avc: denied { write } for pid=11562 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201281946.713:459): avc: denied { add_name } for pid=11562 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201281946.713:459): avc: denied { create } for pid=11562 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201281946.713:459): arch=c000003e syscall=2 success=yes exit=10 a0=2e8f780 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=11561 pid=11562 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201281946.713:460): avc: denied { remove_name } for pid=11562 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127857 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201281946.713:460): avc: denied { unlink } for pid=11562 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127857 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201281946.713:460): arch=c000003e syscall=87 success=yes exit=0 a0=2e8f670 a1=1f364a0 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=11561 pid=11562 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201282354.415:461): avc: denied { write } for pid=2231 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201282354.415:461): avc: denied { add_name } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201282354.415:461): avc: denied { create } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201282354.415:461): avc: denied { write } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201282354.415:461): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201282354.415:462): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201282354.415:462): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe4a257b0 a2=7fffe4a257b0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201282354.415:463): avc: denied { remove_name } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201282354.415:463): avc: denied { rename } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201282354.415:463): avc: denied { unlink } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201282354.415:463): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201282449.239:464): avc: denied { getattr } for pid=11610 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201282449.239:464): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=11609 pid=11610 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201282449.239:465): avc: denied { search } for pid=11610 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201282449.239:465): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=11609 pid=11610 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201282449.239:466): avc: denied { append } for pid=11610 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201282449.239:466): arch=c000003e syscall=2 success=yes exit=4 a0=2ef15f0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=11609 pid=11610 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201282449.239:467): avc: denied { ioctl } for pid=11610 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201282449.239:467): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff677f6db0 a3=31cc1529f0 items=0 ppid=11609 pid=11610 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201282449.240:468): avc: denied { getattr } for pid=11610 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201282449.240:468): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=11609 pid=11610 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201282449.241:469): avc: denied { read } for pid=11610 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201282449.241:469): arch=c000003e syscall=2 success=yes exit=7 a0=2efa390 a1=0 a2=0 a3=3b162f5170 items=0 ppid=11609 pid=11610 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201282449.242:470): avc: denied { read } for pid=11610 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201282449.242:470): arch=c000003e syscall=2 success=yes exit=7 a0=2ef0ec0 a1=90800 a2=0 a3=9 items=0 ppid=11609 pid=11610 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201282449.736:471): avc: denied { write } for pid=11610 comm="spamassassin" name="server.c303.cloudmark.com.conf" dev=dm-2 ino=120127861 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201282449.736:471): arch=c000003e syscall=2 success=yes exit=9 a0=2f12a50 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=11609 pid=11610 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201282449.901:472): avc: denied { write } for pid=11610 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201282449.901:472): avc: denied { add_name } for pid=11610 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201282449.901:472): avc: denied { create } for pid=11610 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201282449.901:472): arch=c000003e syscall=2 success=yes exit=10 a0=2f24940 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=11609 pid=11610 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201282449.901:473): avc: denied { remove_name } for pid=11610 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127857 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201282449.901:473): avc: denied { unlink } for pid=11610 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127857 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201282449.901:473): arch=c000003e syscall=87 success=yes exit=0 a0=2f24b20 a1=1f361e0 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=11609 pid=11610 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201284061.386:474): user pid=11742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201284061.386:475): user pid=11742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201284061.386:476): login pid=11742 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201284061.438:477): user pid=11742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201284061.459:478): user pid=11742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201284061.460:479): user pid=11742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201285604.807:480): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201285604.807:480): arch=c000003e syscall=4 success=yes exit=0 a0=a6be190 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201285739.319:481): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201285739.319:481): arch=c000003e syscall=4 success=yes exit=0 a0=a6bde00 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201286118.421:482): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201286118.421:482): arch=c000003e syscall=2 success=yes exit=104 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201287302.130:483): user pid=11985 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201287302.141:484): user pid=11985 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1201287302.155:485): login pid=11985 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1201287302.156:486): user pid=11985 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201287302.164:487): user pid=11993 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201287302.165:488): user pid=11985 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=AVC msg=audit(1201287307.126:489): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201287307.126:489): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201287307.126:489): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201287310.333:490): user pid=11985 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1201287310.333:491): user pid=11985 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1201287532.660:492): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201287532.660:492): arch=c000003e syscall=4 success=yes exit=0 a0=4d5ac60 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201287532.660:493): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201287532.660:493): arch=c000003e syscall=4 success=yes exit=0 a0=4d5ac60 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201287534.320:494): avc: denied { getattr } for pid=12052 comm="spamassassin" path="/home/phighley/.razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201287534.320:494): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=12051 pid=12052 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201287534.320:495): avc: denied { search } for pid=12052 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201287534.320:495): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=12051 pid=12052 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201287534.321:496): avc: denied { append } for pid=12052 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=22528031 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201287534.321:496): arch=c000003e syscall=2 success=yes exit=4 a0=2e7f9c0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=12051 pid=12052 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201287534.321:497): avc: denied { ioctl } for pid=12052 comm="spamassassin" path="/home/phighley/.razor/razor-agent.log" dev=dm-2 ino=22528031 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201287534.321:497): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffdd04c600 a3=31cc1529f0 items=0 ppid=12051 pid=12052 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201287534.321:498): avc: denied { getattr } for pid=12052 comm="spamassassin" path="/home/phighley/.razor/razor-agent.log" dev=dm-2 ino=22528031 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201287534.321:498): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=12051 pid=12052 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201287534.321:499): avc: denied { getattr } for pid=12052 comm="spamassassin" path="/home/phighley/.razor/identity" dev=dm-2 ino=22528024 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201287534.321:499): arch=c000003e syscall=6 success=yes exit=0 a0=2e84150 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=12051 pid=12052 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201287534.321:500): avc: denied { read } for pid=12052 comm="spamassassin" name="identity" dev=dm-2 ino=22528024 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201287534.321:500): arch=c000003e syscall=89 success=yes exit=17 a0=2e84150 a1=7fffdd04ba40 a2=fff a3=31cc1529f0 items=0 ppid=12051 pid=12052 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201287534.322:501): avc: denied { read } for pid=12052 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=22528030 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201287534.322:501): arch=c000003e syscall=2 success=yes exit=8 a0=2e8a190 a1=0 a2=0 a3=3b162f5170 items=0 ppid=12051 pid=12052 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201287534.322:502): avc: denied { read } for pid=12052 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201287534.322:502): arch=c000003e syscall=2 success=yes exit=8 a0=2e7f290 a1=90800 a2=0 a3=9 items=0 ppid=12051 pid=12052 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201287534.825:503): avc: denied { write } for pid=12052 comm="spamassassin" name="server.c303.cloudmark.com.conf" dev=dm-2 ino=22528040 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201287534.825:503): arch=c000003e syscall=2 success=yes exit=9 a0=2ea7fe0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=12051 pid=12052 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201287535.057:504): avc: denied { write } for pid=12052 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201287535.057:504): avc: denied { add_name } for pid=12052 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201287535.057:504): avc: denied { create } for pid=12052 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201287535.057:504): arch=c000003e syscall=2 success=yes exit=10 a0=2eb5d20 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=12051 pid=12052 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201287535.057:505): avc: denied { remove_name } for pid=12052 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201287535.057:505): avc: denied { unlink } for pid=12052 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201287535.057:505): arch=c000003e syscall=87 success=yes exit=0 a0=2eb5be0 a1=1f396a0 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=12051 pid=12052 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201287640.479:506): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201287640.479:506): arch=c000003e syscall=2 success=yes exit=104 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201287661.475:507): user pid=12069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201287661.476:508): user pid=12069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201287661.476:509): login pid=12069 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201287661.526:510): user pid=12069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201287661.550:511): user pid=12069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201287661.550:512): user pid=12069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201288387.473:513): user pid=11398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201288387.473:514): user pid=11398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201288394.185:515): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201288394.185:515): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201291201.484:516): user pid=12316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201291201.485:517): user pid=12316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201291201.485:518): login pid=12316 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201291201.536:519): user pid=12316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201291202.773:520): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201291202.773:520): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201291261.483:521): user pid=12340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201291261.484:522): user pid=12340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201291261.484:523): login pid=12340 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201291261.536:524): user pid=12340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201291261.556:525): user pid=12340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201291261.557:526): user pid=12340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201293154.414:527): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201293154.414:527): avc: denied { write } for pid=2231 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201293154.414:527): avc: denied { add_name } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201293154.414:527): avc: denied { create } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201293154.414:527): avc: denied { write } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201293154.414:527): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201293154.414:528): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201293154.414:528): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe4a257b0 a2=7fffe4a257b0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201293154.414:529): avc: denied { remove_name } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201293154.414:529): avc: denied { rename } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201293154.414:529): avc: denied { unlink } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201293154.414:529): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201293191.165:530): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201293191.165:530): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000930 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201293191.165:531): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201293191.165:531): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000930 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201293192.548:532): avc: denied { getattr } for pid=12491 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201293192.548:532): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=12490 pid=12491 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201293192.548:533): avc: denied { search } for pid=12491 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201293192.548:533): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=12490 pid=12491 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201293192.549:534): avc: denied { append } for pid=12491 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201293192.549:534): arch=c000003e syscall=2 success=yes exit=4 a0=2e9d980 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=12490 pid=12491 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201293192.549:535): avc: denied { ioctl } for pid=12491 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201293192.549:535): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff96c2b1e0 a3=31cc1529f0 items=0 ppid=12490 pid=12491 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201293192.549:536): avc: denied { getattr } for pid=12491 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201293192.549:536): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=12490 pid=12491 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201293192.549:537): avc: denied { getattr } for pid=12491 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201293192.549:537): arch=c000003e syscall=6 success=yes exit=0 a0=2ea1150 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=12490 pid=12491 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201293192.549:538): avc: denied { read } for pid=12491 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201293192.549:538): arch=c000003e syscall=89 success=yes exit=17 a0=2ea1150 a1=7fff96c2a620 a2=fff a3=31cc1529f0 items=0 ppid=12490 pid=12491 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201293192.550:539): avc: denied { read } for pid=12491 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201293192.550:539): arch=c000003e syscall=2 success=yes exit=7 a0=2ea9000 a1=0 a2=0 a3=3b162f5170 items=0 ppid=12490 pid=12491 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201293192.551:540): avc: denied { read } for pid=12491 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201293192.551:540): arch=c000003e syscall=2 success=yes exit=7 a0=2e9d2a0 a1=90800 a2=0 a3=9 items=0 ppid=12490 pid=12491 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201293193.697:541): avc: denied { write } for pid=12491 comm="spamassassin" name="server.c302.cloudmark.com.conf" dev=dm-2 ino=120127856 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201293193.697:541): arch=c000003e syscall=2 success=yes exit=9 a0=2ed7140 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=12490 pid=12491 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201293193.957:542): avc: denied { write } for pid=12491 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201293193.957:542): avc: denied { add_name } for pid=12491 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201293193.957:542): avc: denied { create } for pid=12491 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201293193.957:542): arch=c000003e syscall=2 success=yes exit=10 a0=2edaf10 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=12490 pid=12491 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201293193.957:543): avc: denied { remove_name } for pid=12491 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127857 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201293193.957:543): avc: denied { unlink } for pid=12491 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127857 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201293193.957:543): arch=c000003e syscall=87 success=yes exit=0 a0=2edadd0 a1=1f3e440 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=12490 pid=12491 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201293398.468:544): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201293398.468:544): arch=c000003e syscall=2 success=yes exit=104 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201294861.569:545): user pid=12610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201294861.569:546): user pid=12610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201294861.569:547): login pid=12610 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201294861.619:548): user pid=12610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201294861.641:549): user pid=12610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201294861.642:550): user pid=12610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201297045.600:551): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201297045.600:551): arch=c000003e syscall=2 success=yes exit=4 a0=a6bce70 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201298461.653:552): user pid=12840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201298461.654:553): user pid=12840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201298461.654:554): login pid=12840 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201298461.704:555): user pid=12840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201298461.726:556): user pid=12840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201298461.726:557): user pid=12840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201299189.137:558): user pid=12316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201299189.138:559): user pid=12316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201299194.419:560): avc: denied { read } for pid=4338 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067530 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201299194.419:560): arch=c000003e syscall=2 success=yes exit=5 a0=2aaaac009ca0 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201299195.781:561): avc: denied { read } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201299195.781:561): arch=c000003e syscall=2 success=yes exit=6 a0=2aaaac009cd0 a1=90800 a2=35 a3=0 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201299195.781:562): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201299195.781:562): arch=c000003e syscall=5 success=yes exit=0 a0=6 a1=409ffd40 a2=409ffd40 a3=0 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201301883.022:563): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201301883.022:563): arch=c000003e syscall=2 success=yes exit=6 a0=2aaaac000b60 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201301883.852:564): avc: denied { getattr } for pid=13069 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201301883.852:564): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=13068 pid=13069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201301883.852:565): avc: denied { search } for pid=13069 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201301883.852:565): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=13068 pid=13069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201301883.853:566): avc: denied { append } for pid=13069 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201301883.853:566): arch=c000003e syscall=2 success=yes exit=4 a0=2e7e340 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=13068 pid=13069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201301883.853:567): avc: denied { ioctl } for pid=13069 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201301883.853:567): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff77e96440 a3=31cc1529f0 items=0 ppid=13068 pid=13069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201301883.853:568): avc: denied { getattr } for pid=13069 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201301883.853:568): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=13068 pid=13069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201301883.854:569): avc: denied { read } for pid=13069 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201301883.854:569): arch=c000003e syscall=2 success=yes exit=7 a0=2e86430 a1=0 a2=0 a3=3b162f5170 items=0 ppid=13068 pid=13069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201301883.855:570): avc: denied { read } for pid=13069 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201301883.855:570): arch=c000003e syscall=2 success=yes exit=7 a0=2e7dc60 a1=90800 a2=0 a3=9 items=0 ppid=13068 pid=13069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201301884.299:571): avc: denied { write } for pid=13069 comm="spamassassin" name="server.c304.cloudmark.com.conf" dev=dm-2 ino=120127860 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201301884.299:571): arch=c000003e syscall=2 success=yes exit=9 a0=2eb0420 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=13068 pid=13069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201301884.450:572): avc: denied { write } for pid=13069 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201301884.450:572): avc: denied { add_name } for pid=13069 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201301884.450:572): avc: denied { create } for pid=13069 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201301884.450:572): arch=c000003e syscall=2 success=yes exit=10 a0=2eb41b0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=13068 pid=13069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201301884.450:573): avc: denied { remove_name } for pid=13069 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127857 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201301884.450:573): avc: denied { unlink } for pid=13069 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127857 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201301884.450:573): arch=c000003e syscall=87 success=yes exit=0 a0=2eb3f80 a1=1f36230 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=13068 pid=13069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201302001.148:574): user pid=13077 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201302001.149:575): user pid=13077 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201302001.149:576): login pid=13077 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201302001.196:577): user pid=13077 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201302061.149:578): user pid=13094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201302061.149:579): user pid=13094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201302061.149:580): login pid=13094 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201302061.198:581): user pid=13094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201302061.220:582): user pid=13094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201302061.220:583): user pid=13094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201302164.430:584): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201302164.430:584): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac009c50 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201302413.263:585): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201302413.263:585): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac009c50 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201303954.415:586): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201303954.415:586): avc: denied { write } for pid=2231 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201303954.415:586): avc: denied { add_name } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201303954.415:586): avc: denied { create } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201303954.415:586): avc: denied { write } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201303954.415:586): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201303954.415:587): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201303954.415:587): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe4a257b0 a2=7fffe4a257b0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201303954.415:588): avc: denied { remove_name } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201303954.415:588): avc: denied { rename } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201303954.415:588): avc: denied { unlink } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001678 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201303954.415:588): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201304025.811:589): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201304025.811:589): arch=c000003e syscall=2 success=yes exit=25 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=USER_ACCT msg=audit(1201305661.232:590): user pid=13340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201305661.233:591): user pid=13340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201305661.233:592): login pid=13340 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201305661.282:593): user pid=13340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201305661.302:594): user pid=13340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201305661.303:595): user pid=13340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201307060.315:596): avc: denied { getattr } for pid=13438 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201307060.315:596): arch=c000003e syscall=6 success=yes exit=0 a0=2ed6460 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=13437 pid=13438 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201307060.315:597): avc: denied { read } for pid=13438 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201307060.315:597): arch=c000003e syscall=89 success=yes exit=17 a0=2ed6460 a1=7fffc1ec48b0 a2=fff a3=31cc1529f0 items=0 ppid=13437 pid=13438 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201307567.873:598): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201307567.873:598): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaac000b60 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201307701.791:599): user pid=13484 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201307701.851:600): user pid=13484 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1201307701.879:601): login pid=13484 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1201307701.879:602): user pid=13484 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201307701.886:603): user pid=13492 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201307701.899:604): user pid=13484 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=AVC msg=audit(1201307707.875:605): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201307707.875:605): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaac000b60 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201307707.875:606): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201307707.875:606): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac009c50 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201307707.875:607): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201307707.875:607): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac00c920 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201307833.410:608): user pid=13484 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1201307833.411:609): user pid=13484 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=dhighley exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1201307968.619:610): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201307968.619:610): arch=c000003e syscall=2 success=yes exit=117 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201307970.316:611): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201307970.316:611): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaac000b60 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201308765.173:612): avc: denied { getattr } for pid=13613 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201308765.173:612): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=13612 pid=13613 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201308765.173:613): avc: denied { search } for pid=13613 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201308765.173:613): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=13612 pid=13613 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201308765.174:614): avc: denied { append } for pid=13613 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201308765.174:614): arch=c000003e syscall=2 success=yes exit=4 a0=2e65c50 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=13612 pid=13613 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201308765.174:615): avc: denied { ioctl } for pid=13613 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201308765.174:615): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff0eb420f0 a3=31cc1529f0 items=0 ppid=13612 pid=13613 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201308765.174:616): avc: denied { getattr } for pid=13613 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201308765.174:616): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=13612 pid=13613 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201308765.174:617): avc: denied { getattr } for pid=13613 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201308765.174:617): arch=c000003e syscall=6 success=yes exit=0 a0=2e69420 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=13612 pid=13613 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201308765.174:618): avc: denied { read } for pid=13613 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201308765.174:618): arch=c000003e syscall=89 success=yes exit=17 a0=2e69420 a1=7fff0eb41530 a2=fff a3=31cc1529f0 items=0 ppid=13612 pid=13613 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201308765.175:619): avc: denied { read } for pid=13613 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201308765.175:619): arch=c000003e syscall=2 success=yes exit=7 a0=2e6b920 a1=0 a2=0 a3=3b162f5170 items=0 ppid=13612 pid=13613 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201308765.195:620): avc: denied { read } for pid=13613 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201308765.195:620): arch=c000003e syscall=2 success=yes exit=7 a0=2e65570 a1=90800 a2=0 a3=9 items=0 ppid=13612 pid=13613 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201308765.646:621): avc: denied { write } for pid=13613 comm="spamassassin" name="server.c304.cloudmark.com.conf" dev=dm-2 ino=120127860 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201308765.646:621): arch=c000003e syscall=2 success=yes exit=9 a0=2e95fe0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=13612 pid=13613 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201308765.820:622): avc: denied { write } for pid=13613 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201308765.820:622): avc: denied { add_name } for pid=13613 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201308765.820:622): avc: denied { create } for pid=13613 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201308765.820:622): arch=c000003e syscall=2 success=yes exit=10 a0=2e99d40 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=13612 pid=13613 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201308765.820:623): avc: denied { remove_name } for pid=13613 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127866 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201308765.820:623): avc: denied { unlink } for pid=13613 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127866 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201308765.820:623): arch=c000003e syscall=87 success=yes exit=0 a0=2e99c00 a1=1f362c0 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=13612 pid=13613 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201309200.341:624): avc: denied { write } for pid=13640 comm="mysqld" name="mysql" dev=dm-0 ino=27000863 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201309200.341:624): avc: denied { add_name } for pid=13640 comm="mysqld" name="#sql_95c_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201309200.341:624): avc: denied { create } for pid=13640 comm="mysqld" name="#sql_95c_0.MYI" scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201309200.341:624): avc: denied { read write } for pid=13640 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001804 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201309200.341:624): arch=c000003e syscall=2 success=yes exit=118 a0=451090a0 a1=202c2 a2=1b0 a3=45106bab items=0 ppid=2339 pid=13640 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201309200.347:625): avc: denied { getattr } for pid=13640 comm="mysqld" path="/var/lib/mysql/#sql_95c_0.MYI" dev=dm-0 ino=27001804 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201309200.347:625): arch=c000003e syscall=6 success=yes exit=0 a0=450fea50 a1=450fe8f0 a2=450fe8f0 a3=450fea5b items=0 ppid=2339 pid=13640 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201309200.360:626): avc: denied { remove_name } for pid=13640 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001804 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201309200.360:626): avc: denied { unlink } for pid=13640 comm="mysqld" name="#sql_95c_0.MYI" dev=dm-0 ino=27001804 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201309200.360:626): arch=c000003e syscall=87 success=yes exit=0 a0=451097d0 a1=10 a2=451095ae a3=0 items=0 ppid=2339 pid=13640 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201309203.374:627): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201309203.374:627): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaac000b60 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201309261.358:628): user pid=13650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201309261.358:629): user pid=13650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201309261.358:630): login pid=13650 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201309261.411:631): user pid=13650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201309261.511:632): user pid=13650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201309261.511:633): user pid=13650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201309604.107:634): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201309604.107:634): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac009c50 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201309604.107:635): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201309604.107:635): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac00c920 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201309782.935:636): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201309782.935:636): arch=c000003e syscall=2 success=yes exit=105 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=CRED_DISP msg=audit(1201309989.058:637): user pid=13077 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201309989.059:638): user pid=13077 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201309992.360:639): avc: denied { read } for pid=4338 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067529 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201309992.360:639): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaac009d80 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201309993.869:640): avc: denied { read } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201309993.869:640): arch=c000003e syscall=2 success=yes exit=5 a0=2aaaac009db0 a1=90800 a2=35 a3=0 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201309993.869:641): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201309993.869:641): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=409ffd40 a2=409ffd40 a3=0 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201311154.414:642): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201311154.414:642): avc: denied { write } for pid=2231 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201311154.414:642): avc: denied { add_name } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201311154.414:642): avc: denied { create } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201311154.414:642): avc: denied { write } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201311154.414:642): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201311154.422:643): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201311154.422:643): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe4a257b0 a2=7fffe4a257b0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201311154.422:644): avc: denied { remove_name } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201311154.422:644): avc: denied { rename } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201311154.422:644): avc: denied { unlink } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201311154.422:644): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201312036.416:645): avc: denied { getattr } for pid=13834 comm="spamassassin" path="/home/phighley/.razor/identity" dev=dm-2 ino=22528024 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201312036.416:645): arch=c000003e syscall=6 success=yes exit=0 a0=2ea94d0 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=13833 pid=13834 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201312036.416:646): avc: denied { read } for pid=13834 comm="spamassassin" name="identity" dev=dm-2 ino=22528024 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201312036.416:646): arch=c000003e syscall=89 success=yes exit=17 a0=2ea94d0 a1=7fffc69f83f0 a2=fff a3=31cc1529f0 items=0 ppid=13833 pid=13834 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201312045.101:647): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201312045.101:647): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaac13f780 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201312801.070:648): user pid=13869 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201312801.070:649): user pid=13869 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201312801.070:650): login pid=13869 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201312801.121:651): user pid=13869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201312861.086:652): user pid=13887 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201312861.087:653): user pid=13887 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201312861.087:654): login pid=13887 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201312861.139:655): user pid=13887 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201312861.158:656): user pid=13887 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201312861.159:657): user pid=13887 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201313328.395:658): avc: denied { getattr } for pid=13941 comm="spamassassin" path="/home/dhighley/.razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201313328.395:658): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=13940 pid=13941 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201313328.395:659): avc: denied { search } for pid=13941 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201313328.395:659): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=13940 pid=13941 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201313328.396:660): avc: denied { append } for pid=13941 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201313328.396:660): arch=c000003e syscall=2 success=yes exit=4 a0=2ee4ce0 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=13940 pid=13941 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201313328.396:661): avc: denied { ioctl } for pid=13941 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201313328.396:661): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fffdeff45a0 a3=31cc1529f0 items=0 ppid=13940 pid=13941 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201313328.396:662): avc: denied { getattr } for pid=13941 comm="spamassassin" path="/home/dhighley/.razor/razor-agent.log" dev=dm-2 ino=120127745 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201313328.396:662): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=13940 pid=13941 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201313328.397:663): avc: denied { read } for pid=13941 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=120127744 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201313328.397:663): arch=c000003e syscall=2 success=yes exit=7 a0=2eea920 a1=0 a2=0 a3=3b162f5170 items=0 ppid=13940 pid=13941 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201313328.398:664): avc: denied { read } for pid=13941 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201313328.398:664): arch=c000003e syscall=2 success=yes exit=7 a0=2ee4600 a1=90800 a2=0 a3=9 items=0 ppid=13940 pid=13941 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201314754.415:665): avc: denied { write } for pid=2231 comm="ntpd" name="ntp" dev=dm-0 ino=27000848 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201314754.415:665): avc: denied { add_name } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201314754.415:665): avc: denied { create } for pid=2231 comm="ntpd" name="drift.TEMP" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201314754.415:665): avc: denied { write } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201314754.415:665): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaadad9b0 a1=241 a2=1b6 a3=240 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201314754.415:666): avc: denied { getattr } for pid=2231 comm="ntpd" path="/var/lib/ntp/drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201314754.415:666): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe4a257b0 a2=7fffe4a257b0 a3=0 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201314754.415:667): avc: denied { search } for pid=2231 comm="ntpd" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201314754.415:667): avc: denied { remove_name } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201314754.415:667): avc: denied { rename } for pid=2231 comm="ntpd" name="drift.TEMP" dev=dm-0 ino=27001806 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201314754.415:667): avc: denied { unlink } for pid=2231 comm="ntpd" name="drift" dev=dm-0 ino=27001804 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201314754.415:667): arch=c000003e syscall=82 success=yes exit=0 a0=2aaaaadad9b0 a1=2aaaaadad990 a2=0 a3=2aaaaab1a562 items=0 ppid=1 pid=2231 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) >type=AVC msg=audit(1201314780.654:668): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201314780.654:668): arch=c000003e syscall=2 success=yes exit=9 a0=2aaaac13f780 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201315807.629:669): avc: denied { write } for pid=14091 comm="spamassassin" name="server.c302.cloudmark.com.conf" dev=dm-2 ino=120127856 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201315807.629:669): arch=c000003e syscall=2 success=yes exit=9 a0=2f135d0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=14090 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201315808.133:670): avc: denied { write } for pid=14091 comm="spamassassin" name=".razor" dev=dm-2 ino=120127734 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201315808.133:670): avc: denied { add_name } for pid=14091 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201315808.133:670): avc: denied { create } for pid=14091 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201315808.133:670): arch=c000003e syscall=2 success=yes exit=10 a0=2f183a0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=14090 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201315808.133:671): avc: denied { remove_name } for pid=14091 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127866 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201315808.133:671): avc: denied { unlink } for pid=14091 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=120127866 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201315808.133:671): arch=c000003e syscall=87 success=yes exit=0 a0=2f18260 a1=1f35be0 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=14090 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201315956.874:672): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201315956.874:672): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000930 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201316461.173:673): user pid=14139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201316461.173:674): user pid=14139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201316461.173:675): login pid=14139 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201316461.226:676): user pid=14139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201316461.249:677): user pid=14139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201316461.250:678): user pid=14139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201316463.604:679): avc: denied { write } for pid=6524 comm="mysqld" name="housekeeping.MYI" dev=dm-0 ino=27067325 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201316463.604:679): arch=c000003e syscall=2 success=yes exit=105 a0=45148e90 a1=2 a2=0 a3=4513e75b items=0 ppid=2339 pid=6524 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null) >type=AVC msg=audit(1201316466.880:680): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201316466.880:680): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac009c00 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201318170.622:681): avc: denied { getattr } for pid=14291 comm="spamassassin" path="/home/dhighley/.razor/identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201318170.622:681): arch=c000003e syscall=6 success=yes exit=0 a0=2e81680 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=14290 pid=14291 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201318170.622:682): avc: denied { read } for pid=14291 comm="spamassassin" name="identity" dev=dm-2 ino=120127738 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201318170.622:682): arch=c000003e syscall=89 success=yes exit=17 a0=2e81680 a1=7fff08faa9a0 a2=fff a3=31cc1529f0 items=0 ppid=14290 pid=14291 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201320061.269:683): user pid=14393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201320061.269:684): user pid=14393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201320061.269:685): login pid=14393 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201320061.321:686): user pid=14393 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201320061.344:687): user pid=14393 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201320061.345:688): user pid=14393 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201320743.647:689): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1201320743.648:690): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1201320750.091:691): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201320750.096:692): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201320750.105:693): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1201320750.121:694): login pid=2999 uid=0 old auid=1000 new auid=1000 >type=USER_ROLE_CHANGE msg=audit(1201320750.201:695): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201320750.369:696): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=dhighley exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1201320750.369:697): user pid=2999 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=AVC msg=audit(1201320750.670:698): avc: denied { search } for pid=14469 comm="hal-acl-tool" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201320750.670:699): avc: denied { search } for pid=14467 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201320750.670:699): avc: denied { read write } for pid=14467 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001795 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201320750.670:698): avc: denied { read write } for pid=14469 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001795 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201320750.670:699): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2692 pid=14467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201320750.691:700): avc: denied { lock } for pid=14467 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001795 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201320750.670:698): arch=c000003e syscall=2 success=yes exit=3 a0=403ed2 a1=42 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2692 pid=14469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201320750.808:701): avc: denied { getattr } for pid=14469 comm="hal-acl-tool" path="/var/lib/hal/acl-list" dev=dm-0 ino=27001795 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201320750.808:701): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7fffb8c572a0 a2=7fffb8c572a0 a3=0 items=0 ppid=2692 pid=14469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201320750.820:702): avc: denied { write } for pid=14469 comm="hal-acl-tool" name="hal" dev=dm-0 ino=27001669 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201320750.820:702): avc: denied { add_name } for pid=14469 comm="hal-acl-tool" name="acl-list.Q3FC5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201320750.820:702): avc: denied { create } for pid=14469 comm="hal-acl-tool" name="acl-list.Q3FC5T" scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201320750.820:702): arch=c000003e syscall=2 success=yes exit=5 a0=610ef0 a1=c2 a2=1b6 a3=31cd27b122 items=0 ppid=2692 pid=14469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201320750.820:703): avc: denied { remove_name } for pid=14469 comm="hal-acl-tool" name="acl-list.Q3FC5T" dev=dm-0 ino=27001809 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201320750.820:703): avc: denied { rename } for pid=14469 comm="hal-acl-tool" name="acl-list.Q3FC5T" dev=dm-0 ino=27001809 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=AVC msg=audit(1201320750.820:703): avc: denied { unlink } for pid=14469 comm="hal-acl-tool" name="acl-list" dev=dm-0 ino=27001795 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file >type=SYSCALL msg=audit(1201320750.820:703): arch=c000003e syscall=82 success=yes exit=0 a0=6141b0 a1=403ed2 a2=41 a3=31cc1529f0 items=0 ppid=2692 pid=14469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=SYSCALL msg=audit(1201320750.691:700): arch=c000003e syscall=73 success=yes exit=0 a0=3 a1=2 a2=1a4 a3=682f62696c2f7261 items=0 ppid=2692 pid=14467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null) >type=AVC msg=audit(1201320754.665:704): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201320754.665:704): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201320754.665:704): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaac13f780 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201320754.665:705): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201320754.665:705): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac009c00 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201320754.665:706): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201320754.665:706): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac000930 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201320764.665:707): avc: denied { read } for pid=4338 comm="clamav-milter" name="clamav" dev=dm-0 ino=27066388 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1201320764.665:707): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaac13f780 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1201320787.801:708): user pid=13869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201320787.801:709): user pid=13869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201320794.666:710): avc: denied { read } for pid=4338 comm="clamav-milter" name="daily.info" dev=dm-0 ino=27067530 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201320794.666:710): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaac009ca0 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201320796.020:711): avc: denied { read } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201320796.020:711): arch=c000003e syscall=2 success=yes exit=7 a0=2aaaacf9f3c0 a1=90800 a2=35 a3=0 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201320796.020:712): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201320796.020:712): arch=c000003e syscall=5 success=yes exit=0 a0=7 a1=409ffd40 a2=409ffd40 a3=0 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1201320809.575:713): user pid=14808 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1201320809.577:714): user pid=14808 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1201320809.677:715): user pid=14808 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1201320809.677:716): user pid=14808 uid=1000 auid=1000 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1201321358.203:717): avc: denied { search } for pid=4338 comm="clamav-milter" name="lib" dev=dm-0 ino=26968066 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201321358.203:717): arch=c000003e syscall=2 success=yes exit=4 a0=2aaaaf5c5fd0 a1=90800 a2=4151db a3=40a000b8 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201321751.285:718): avc: denied { getattr } for pid=4338 comm="clamav-milter" path="/var/lib/clamav/main.cvd" dev=dm-0 ino=27066444 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201321751.285:718): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac00c920 a1=40a00050 a2=40a00050 a3=3fe326cdc2 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201321751.285:719): avc: denied { search } for pid=4338 comm="clamav-milter" name="daily.inc" dev=dm-0 ino=27066426 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201321751.285:719): arch=c000003e syscall=4 success=yes exit=0 a0=2aaaac009c50 a1=40a00050 a2=40a00050 a3=3fe326d662 items=0 ppid=1 pid=4338 auid=0 uid=492 gid=486 euid=492 suid=492 fsuid=492 egid=486 sgid=486 fsgid=486 tty=(none) comm="clamav-milter" exe="/usr/sbin/clamav-milter" subj=system_u:system_r:clamd_t:s0 key=(null) >type=AVC msg=audit(1201321752.537:720): avc: denied { getattr } for pid=15024 comm="spamassassin" path="/home/phighley/.razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201321752.537:720): arch=c000003e syscall=4 success=yes exit=0 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=15023 pid=15024 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201321752.537:721): avc: denied { search } for pid=15024 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201321752.537:721): arch=c000003e syscall=4 success=no exit=-2 a0=911750 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=15023 pid=15024 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201321752.538:722): avc: denied { append } for pid=15024 comm="spamassassin" name="razor-agent.log" dev=dm-2 ino=22528031 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201321752.538:722): arch=c000003e syscall=2 success=yes exit=4 a0=2e83050 a1=441 a2=1b6 a3=3b162f5170 items=0 ppid=15023 pid=15024 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201321752.538:723): avc: denied { ioctl } for pid=15024 comm="spamassassin" path="/home/phighley/.razor/razor-agent.log" dev=dm-2 ino=22528031 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201321752.538:723): arch=c000003e syscall=16 success=no exit=-25 a0=4 a1=5401 a2=7fff5c48da40 a3=31cc1529f0 items=0 ppid=15023 pid=15024 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201321752.538:724): avc: denied { getattr } for pid=15024 comm="spamassassin" path="/home/phighley/.razor/razor-agent.log" dev=dm-2 ino=22528031 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201321752.538:724): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=6040b0 a2=6040b0 a3=31cc1529f0 items=0 ppid=15023 pid=15024 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201321752.538:725): avc: denied { getattr } for pid=15024 comm="spamassassin" path="/home/phighley/.razor/identity" dev=dm-2 ino=22528024 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201321752.538:725): arch=c000003e syscall=6 success=yes exit=0 a0=2e86820 a1=604140 a2=604140 a3=31cc1529f0 items=0 ppid=15023 pid=15024 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201321752.538:726): avc: denied { read } for pid=15024 comm="spamassassin" name="identity" dev=dm-2 ino=22528024 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201321752.538:726): arch=c000003e syscall=89 success=yes exit=17 a0=2e86820 a1=7fff5c48ce80 a2=fff a3=31cc1529f0 items=0 ppid=15023 pid=15024 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201321752.539:727): avc: denied { read } for pid=15024 comm="spamassassin" name="servers.discovery.lst" dev=dm-2 ino=22528030 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201321752.539:727): arch=c000003e syscall=2 success=yes exit=7 a0=2e8bf90 a1=0 a2=0 a3=3b162f5170 items=0 ppid=15023 pid=15024 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201321752.540:728): avc: denied { read } for pid=15024 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1201321752.540:728): arch=c000003e syscall=2 success=yes exit=7 a0=2e82970 a1=90800 a2=0 a3=9 items=0 ppid=15023 pid=15024 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201321752.996:729): avc: denied { write } for pid=15024 comm="spamassassin" name="server.c304.cloudmark.com.conf" dev=dm-2 ino=22528038 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201321752.996:729): arch=c000003e syscall=2 success=yes exit=9 a0=2eb5be0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=15023 pid=15024 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201321753.257:730): avc: denied { write } for pid=15024 comm="spamassassin" name=".razor" dev=dm-2 ino=22528021 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201321753.257:730): avc: denied { add_name } for pid=15024 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201321753.257:730): avc: denied { create } for pid=15024 comm="spamassassin" name="servers.catalogue.lst.lock" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201321753.257:730): arch=c000003e syscall=2 success=yes exit=10 a0=2eb99b0 a1=241 a2=1b6 a3=3b162f5170 items=0 ppid=15023 pid=15024 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201321753.257:731): avc: denied { remove_name } for pid=15024 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=dir >type=AVC msg=audit(1201321753.257:731): avc: denied { unlink } for pid=15024 comm="spamassassin" name="servers.catalogue.lst.lock" dev=dm-2 ino=22528041 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:user_razor_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201321753.257:731): arch=c000003e syscall=87 success=yes exit=0 a0=2eb94e0 a1=1f34810 a2=3b16312ce0 a3=31cc1529f0 items=0 ppid=15023 pid=15024 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="spamassassin" exe="/usr/bin/perl" subj=system_u:system_r:procmail_t:s0 key=(null)
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 430195
: 293039