Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 293421 Details for
Bug 430829
SELinux is preventing the /usr/sbin/cupsd from using potentially mislabeled files ().
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
audit.log
audit.log (text/plain), 2.00 MB, created by
Rick Richardson
on 2008-01-30 15:56:13 UTC
(
hide
)
Description:
audit.log
Filename:
MIME Type:
Creator:
Rick Richardson
Created:
2008-01-30 15:56:13 UTC
Size:
2.00 MB
patch
obsolete
>type=DAEMON_START msg=audit(1198589893.080:1509): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1819 res=success, auditd pid=1819 >type=CONFIG_CHANGE msg=audit(1198589893.180:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1198589893.180:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1198589893.197:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1198589893.197:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=MAC_STATUS msg=audit(1198590035.015:9): enforcing=0 old_enforcing=1 auid=4294967295 >type=USER_AVC msg=audit(1198590035.015:10): user pid=1984 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=SYSCALL msg=audit(1198590035.015:9): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bf93edd4 a2=1 a3=bf93edd4 items=0 ppid=2806 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setenforce" exe="/usr/sbin/setenforce" subj=system_u:system_r:firstboot_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1198590135.500:11): user pid=2892 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1198590240.331:12): user pid=2989 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198590240.338:13): user pid=2989 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198590240.339:14): user pid=2989 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198590240.357:15): login pid=2989 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198590240.377:16): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:system_r:unconfined_t:s0 selected-context=unconfined_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198590240.433:17): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198590240.433:18): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198590318.060:19): user pid=3254 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198590318.060:20): user pid=3254 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198590318.095:21): user pid=3254 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1198590349.501:22): user pid=3317 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198590349.573:23): user pid=3254 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198590357.511:24): user pid=3322 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198590357.511:25): user pid=3322 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198590357.518:26): user pid=3322 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198590376.407:27): user pid=3346 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198590376.407:28): user pid=3346 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198590376.414:29): user pid=3346 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1198612032.500:30): user pid=3397 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198612032.564:31): user pid=3322 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198612212.561:32): user pid=3502 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1198612218.196:33): user pid=3505 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1198612218.199:34): user pid=3505 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1198612218.209:35): user pid=3505 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1198612218.209:36): user pid=3505 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1198612320.624:37): user pid=3505 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1198612320.625:38): user pid=3505 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1198612861.101:39): user pid=4170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198616462.093:40): user pid=10640 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198620061.852:41): user pid=14576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_LOGIN msg=audit(1198621691.271:42): user pid=14660 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1198621691.272:43): user pid=14660 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1198621694.761:44): user pid=14660 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198621694.765:45): user pid=14660 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198621694.883:46): user pid=14660 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1198621694.884:47): login pid=14660 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1198621694.884:48): user pid=14660 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198621694.886:49): user pid=14664 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1198621695.530:50): user pid=14660 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1198621695.531:51): user pid=14660 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1198622144.123:52): user pid=14715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1198622144.124:53): user pid=14715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1198622147.627:54): user pid=14715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198622147.631:55): user pid=14715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198622147.639:56): user pid=14715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1198622147.640:57): login pid=14715 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1198622147.640:58): user pid=14715 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198622147.641:59): user pid=14719 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1198622147.763:60): user pid=14715 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=/dev/pts/4 res=success)' >type=CRED_DISP msg=audit(1198622264.311:61): user pid=14715 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1198622264.312:62): user pid=14715 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198623661.322:63): user pid=15469 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198624176.178:64): user pid=15530 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198624176.181:65): user pid=15530 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198624176.223:66): user pid=15530 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1198624176.224:67): login pid=15530 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198624176.225:68): user pid=15530 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198624176.226:69): user pid=15534 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1198624218.213:70): user pid=15530 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1198624218.214:71): user pid=15530 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_AUTH msg=audit(1198624274.711:72): user pid=15569 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198624274.715:73): user pid=15569 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198624274.752:74): user pid=15569 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1198624274.752:75): login pid=15569 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198624274.753:76): user pid=15569 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198624274.755:77): user pid=15573 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1198624313.104:78): user pid=15569 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1198624313.105:79): user pid=15569 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_AUTH msg=audit(1198624359.745:80): user pid=15607 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198624359.749:81): user pid=15607 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198624359.758:82): user pid=15607 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1198624359.759:83): login pid=15607 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198624359.760:84): user pid=15607 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198624359.762:85): user pid=15611 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1198624380.984:86): user pid=15607 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1198624380.985:87): user pid=15607 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_AUTH msg=audit(1198624461.533:88): user pid=15641 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198624461.537:89): user pid=15641 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198624461.544:90): user pid=15641 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1198624461.544:91): login pid=15641 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198624461.545:92): user pid=15641 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198624461.546:93): user pid=15645 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198627262.273:94): user pid=15781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198628487.934:95): user pid=15930 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1198628488.054:96): user pid=15930 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1198628488.730:97): user pid=15930 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_ACQ msg=audit(1198628488.806:98): user pid=15930 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=SELINUX_ERR msg=audit(1198628524.103:99): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:cupsd_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198628524.103:99): arch=40000003 syscall=11 success=yes exit=0 a0=8a63340 a1=8a63358 a2=8a62038 a3=0 items=0 ppid=16306 pid=16307 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts5 comm="cupsd" exe="/usr/sbin/cupsd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1198628561.869:100): user pid=16315 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198628561.869:101): user pid=16315 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198628562.334:102): user pid=16315 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198628571.654:103): user pid=16315 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198628579.926:104): user pid=16339 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198628579.927:105): user pid=16339 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198628579.936:106): user pid=16339 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198628588.795:107): user pid=16339 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=SELINUX_ERR msg=audit(1198628609.751:108): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:cupsd_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198628609.751:108): arch=40000003 syscall=11 success=yes exit=0 a0=949d340 a1=949d358 a2=949c038 a3=0 items=0 ppid=16363 pid=16364 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts5 comm="cupsd" exe="/usr/sbin/cupsd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1198628622.423:109): user pid=16370 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1198628622.423:110): user pid=16370 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1198628622.493:111): user pid=16370 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1198628631.153:112): user pid=16370 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198630862.360:113): user pid=16467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198632322.348:114): user pid=16535 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198632322.348:115): user pid=16535 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198632322.601:116): user pid=16535 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198632331.658:117): user pid=16535 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198632367.608:118): user pid=16584 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198632367.608:119): user pid=16584 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198632367.769:120): user pid=16584 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198632376.024:121): user pid=16584 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1198632438.078:122): user pid=15930 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_DISP msg=audit(1198632438.180:123): user pid=15641 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1198632438.180:124): user pid=15641 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1198632438.323:125): user pid=15930 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1198632440.140:126): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198632440.140:127): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1198632455.486:1510): auditd normal halt, sending auid=4294967295 pid=16979 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1819 >type=DAEMON_START msg=audit(1198632685.555:1194): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1747 res=success, auditd pid=1747 >type=CONFIG_CHANGE msg=audit(1198632685.654:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1198632685.654:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1198632685.688:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1198632685.688:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1198632724.417:8): user pid=2530 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198632724.424:9): user pid=2530 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198632724.438:10): user pid=2530 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198632724.447:11): login pid=2530 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198632724.466:12): user pid=2530 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:system_r:unconfined_t:s0 selected-context=unconfined_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198632724.536:13): user pid=2530 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198632724.537:14): user pid=2530 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198632759.227:15): user pid=2810 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1198632770.408:16): user pid=2816 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198632770.408:17): user pid=2816 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198632770.492:18): user pid=2816 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198632943.052:19): user pid=2874 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198632943.052:20): user pid=2874 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198632943.169:21): user pid=2874 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198632959.913:22): user pid=2874 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198633177.962:23): user pid=2941 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1198633177.967:24): user pid=2941 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1198633178.000:25): user pid=2941 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1198633178.000:26): user pid=2941 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1198633214.949:27): user pid=3010 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1198633214.952:28): user pid=3010 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1198633214.959:29): user pid=3010 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1198633214.959:30): user pid=3010 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1198633254.671:31): user pid=2816 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198634461.868:32): user pid=3083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198638061.510:33): user pid=3190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AVC msg=audit(1198640192.206:34): user pid=1910 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=signal interface=com.redhat.SEtroubleshootdIface member=restart dest=org.freedesktop.DBus spid=3312 tpid=2728 scontext=unconfined_u:system_r:rpm_script_t:s0 tcontext=unconfined_u:system_r:unconfined_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=ANOM_ABEND msg=audit(1198640200.975:35): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=2881 comm="dbus-launch" sig=6 >type=USER_AUTH msg=audit(1198640266.301:36): user pid=3383 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198640266.301:37): user pid=3383 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198640266.515:38): user pid=3383 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198640273.298:39): user pid=3383 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1198640385.759:40): user pid=3709 uid=0 auid=500 subj=unconfined_u:system_r:groupadd_t:s0 msg='op=adding group acct=wbpriv exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1198640439.890:41): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=3395 comm="dbus-launch" sig=6 >type=USER_CHAUTHTOK msg=audit(1198640504.119:42): user pid=6396 uid=0 auid=500 subj=unconfined_u:system_r:groupadd_t:s0 msg='op=adding group acct=tomcat exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1198640504.157:43): user pid=6397 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=tomcat exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1198640507.508:44): user pid=6873 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=mailnull exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1198640507.510:45): user pid=6874 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=smmsp exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1198640514.907:46): user pid=6915 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=sshd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1198640515.937:47): user pid=6929 uid=0 auid=500 subj=unconfined_u:system_r:groupadd_t:s0 msg='op=adding group acct=jetty exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1198640516.013:48): user pid=6953 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=jetty exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1198640607.901:49): user pid=7090 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1198640608.015:50): user pid=7091 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1198640928.445:51): user pid=7445 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=mysql exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AVC msg=audit(1198641282.813:52): user pid=1910 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1198641282.676:53): policy loaded auid=500 >type=SYSCALL msg=audit(1198641282.676:53): arch=40000003 syscall=4 success=yes exit=3988647 a0=4 a1=b7b64000 a2=3cdca7 a3=bfe2db28 items=0 ppid=9066 pid=9067 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0 key=(null) >type=USER_ACCT msg=audit(1198641662.012:54): user pid=9277 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198641799.525:55): user pid=9460 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198641799.552:56): user pid=9460 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198641799.806:57): user pid=9460 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1198641799.808:58): login pid=9460 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198641799.808:59): user pid=9460 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198641799.810:60): user pid=9465 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=MAC_CONFIG_CHANGE msg=audit(1198641944.119:61): bool=use_nfs_home_dirs val=1 old_val=0 auid=500 >type=SYSCALL msg=audit(1198641944.119:61): arch=40000003 syscall=4 success=yes exit=2 a0=4 a1=bf9011f6 a2=2 a3=bf9011f8 items=0 ppid=9650 pid=9651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:system_r:setsebool_t:s0 key=(null) >type=USER_AVC msg=audit(1198641944.124:62): user pid=1910 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1198641959.049:63): user pid=1910 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1198641958.663:64): policy loaded auid=500 >type=SYSCALL msg=audit(1198641958.663:64): arch=40000003 syscall=4 success=yes exit=3988647 a0=4 a1=b7be6000 a2=3cdca7 a3=bfb2bbe8 items=0 ppid=9653 pid=9654 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1198641959.738:65): user pid=9653 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0 new-seuser=system_u new-role=? new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)' >type=USER_ROLE_CHANGE msg=audit(1198641961.872:66): user pid=9656 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1198641963.667:67): user pid=9657 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="guest_u" old-seuser=? old-role=? old-range=? new-seuser=guest_u new-role=guest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1198641965.463:68): user pid=9658 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="xguest_u" old-seuser=? old-role=? old-range=? new-seuser=xguest_u new-role=xguest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1198641967.721:69): user pid=9663 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1198641969.525:70): user pid=9664 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1198641982.197:71): user pid=9665 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1198642062.802:72): user pid=9684 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198642062.802:73): user pid=9684 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198642063.834:74): user pid=9684 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198642116.978:75): user pid=9684 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1198642235.784:76): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=9696 comm="dbus-launch" sig=6 >type=SELINUX_ERR msg=audit(1198642276.762:77): security_compute_sid: invalid context unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:sshd_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198642276.762:77): arch=40000003 syscall=11 success=yes exit=0 a0=9d494a0 a1=9d493f8 a2=9d46178 a3=0 items=0 ppid=9965 pid=9973 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198642280.362:78): security_compute_sid: invalid context unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:sshd_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198642280.362:78): arch=40000003 syscall=11 success=yes exit=0 a0=9d5ae28 a1=9d3e0b8 a2=9d46178 a3=0 items=0 ppid=9965 pid=9979 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198642528.706:79): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:cupsd_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198642528.706:79): arch=40000003 syscall=11 success=yes exit=0 a0=92e3948 a1=92e37a8 a2=92e3c88 a3=0 items=0 ppid=10461 pid=10462 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="cupsd" exe="/usr/sbin/cupsd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198642686.928:80): security_compute_sid: invalid context unconfined_u:system_r:crond_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:crond_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198642686.928:80): arch=40000003 syscall=11 success=yes exit=0 a0=88d4480 a1=88d1100 a2=88c3a00 a3=0 items=0 ppid=10575 pid=10585 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="atd" exe="/usr/sbin/atd" subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1198642956.687:81): user pid=10892 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198642956.687:82): user pid=10892 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198642956.988:83): user pid=10892 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=ANOM_ABEND msg=audit(1198642990.377:84): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=10932 comm="dbus-launch" sig=6 >type=USER_END msg=audit(1198642999.520:85): user pid=10892 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198643010.143:86): user pid=10965 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198643010.143:87): user pid=10965 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198643010.553:88): user pid=10965 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1198643013.618:89): user pid=10965 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198643056.415:90): user pid=10988 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198643056.415:91): user pid=10988 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198643056.493:92): user pid=10988 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=SELINUX_ERR msg=audit(1198643069.661:93): security_compute_sid: invalid context unconfined_u:system_r:crond_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:crond_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643069.661:93): arch=40000003 syscall=11 success=yes exit=0 a0=89de948 a1=89de7a8 a2=89dec88 a3=0 items=0 ppid=11025 pid=11026 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="crond" exe="/usr/sbin/crond" subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1198643110.821:94): user pid=10988 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198643117.597:95): user pid=11074 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198643117.597:96): user pid=11074 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198643117.607:97): user pid=11074 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=SELINUX_ERR msg=audit(1198643134.927:98): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643134.927:98): arch=40000003 syscall=11 success=yes exit=0 a0=bfbede08 a1=bfbdfb20 a2=bfbdf940 a3=bfbdf940 items=0 ppid=10463 pid=11082 auid=500 uid=0 gid=7 euid=0 suid=0 fsuid=0 egid=7 sgid=7 fsgid=7 tty=(none) comm="cups-deviced" exe="/usr/lib/cups/daemon/cups-deviced" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643134.996:99): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643134.996:99): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=0 items=0 ppid=11082 pid=11083 auid=500 uid=0 gid=7 euid=0 suid=0 fsuid=0 egid=7 sgid=7 fsgid=7 tty=(none) comm="lpd" exe="/usr/lib/cups/backend/lpd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643135.091:100): security_compute_sid: invalid context unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hplip_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643135.091:100): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11084 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hpfax" exe="/bin/env" subj=unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643135.125:101): security_compute_sid: invalid context unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643135.125:101): arch=40000003 syscall=11 success=yes exit=0 a0=bf91e33d a1=bf91e488 a2=bf91e494 a3=bf91ede3 items=0 ppid=11082 pid=11084 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="python" exe="/usr/bin/python" subj=unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643136.588:102): security_compute_sid: invalid context unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hplip_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643136.588:102): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11110 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hp" exe="/usr/lib/cups/backend/hp" subj=unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643136.622:103): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643136.622:103): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11119 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="beh" exe="/usr/bin/perl" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.159:104): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.159:104): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=0 items=0 ppid=11082 pid=11120 auid=500 uid=0 gid=7 euid=0 suid=0 fsuid=0 egid=7 sgid=7 fsgid=7 tty=(none) comm="serial" exe="/usr/lib/cups/backend/serial" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.183:105): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.183:105): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11121 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="ncp" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.208:106): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.208:106): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=0 items=0 ppid=11082 pid=11122 auid=500 uid=0 gid=7 euid=0 suid=0 fsuid=0 egid=7 sgid=7 fsgid=7 tty=(none) comm="http" exe="/usr/lib/cups/backend/ipp" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.221:107): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.221:107): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11123 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="dnssd" exe="/usr/bin/perl" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.228:108): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.228:108): arch=40000003 syscall=11 success=yes exit=0 a0=21203e a1=bfb00ff8 a2=8719b48 a3=400 items=0 ppid=11123 pid=11124 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.233:109): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.233:109): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=0 items=0 ppid=11082 pid=11126 auid=500 uid=0 gid=7 euid=0 suid=0 fsuid=0 egid=7 sgid=7 fsgid=7 tty=(none) comm="ipp" exe="/usr/lib/cups/backend/ipp" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.318:110): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.318:110): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11127 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="snmp" exe="/usr/lib/cups/backend/snmp" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.372:111): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.372:111): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11128 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="parallel" exe="/usr/lib/cups/backend/parallel" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.471:112): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.471:112): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11137 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="smb" exe="/usr/bin/smbspool" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.587:113): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.587:113): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11138 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="usb" exe="/usr/lib/cups/backend/usb" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.605:114): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.605:114): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11139 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="socket" exe="/usr/lib/cups/backend/socket" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.633:115): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.633:115): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11140 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="scsi" exe="/usr/lib/cups/backend/scsi" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.647:116): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.647:116): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11141 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="bluetooth" exe="/usr/lib/cups/backend/bluetooth" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643137.685:117): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643137.685:117): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11142 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hal" exe="/usr/lib/cups/backend/hal" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643138.750:118): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643138.750:118): arch=40000003 syscall=11 success=yes exit=0 a0=bfbed608 a1=bfbdf280 a2=bfbdf0a0 a3=bfbdf0a0 items=0 ppid=10463 pid=11150 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cups-driverd" exe="/usr/lib/cups/daemon/cups-driverd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643141.598:119): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643141.598:119): arch=40000003 syscall=11 success=yes exit=0 a0=3b1dfd a1=bf832b1c a2=bf835b9c a3=400 items=0 ppid=11150 pid=11151 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643141.616:120): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643141.616:120): arch=40000003 syscall=11 success=yes exit=0 a0=9c73cd0 a1=9c73d70 a2=9c72f98 a3=40 items=0 ppid=11150 pid=11151 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic" exe="/usr/bin/perl" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643142.008:121): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643142.008:121): arch=40000003 syscall=11 success=yes exit=0 a0=21203e a1=bfe393c8 a2=8ff2b48 a3=400 items=0 ppid=11151 pid=11152 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643142.013:122): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SELINUX_ERR msg=audit(1198643142.013:123): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643142.013:123): arch=40000003 syscall=11 success=yes exit=0 a0=9716ef8 a1=9716040 a2=9716f80 a3=40 items=0 ppid=11152 pid=11154 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-perl-d" exe="/usr/bin/foomatic-perl-data" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1198643142.013:122): arch=40000003 syscall=11 success=yes exit=0 a0=97170f0 a1=9716f68 a2=9716020 a3=40 items=0 ppid=11152 pid=11153 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-combo-" exe="/usr/bin/foomatic-combo-xml" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643298.368:124): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643298.368:124): arch=40000003 syscall=11 success=yes exit=0 a0=bfbeb8f6 a1=bfbeb8dc a2=bfbeb6cc a3=bfbeb6cc items=0 ppid=10463 pid=11164 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cups-driverd" exe="/usr/lib/cups/daemon/cups-driverd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1198643298.714:125): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643298.848:126): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643298.853:127): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=SELINUX_ERR msg=audit(1198643321.835:128): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SELINUX_ERR msg=audit(1198643321.836:129): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SELINUX_ERR msg=audit(1198643321.837:130): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643321.835:128): arch=40000003 syscall=11 success=yes exit=0 a0=bfbec580 a1=b830ae58 a2=bfbeae98 a3=bfbeae98 items=0 ppid=10463 pid=11166 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="pstops" exe="/usr/lib/cups/filter/pstops" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1198643321.837:130): arch=40000003 syscall=11 success=yes exit=0 a0=bfbec580 a1=b830ae58 a2=bfbeae98 a3=bfbeae98 items=0 ppid=10463 pid=11168 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="socket" exe="/usr/lib/cups/backend/socket" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1198643321.836:129): arch=40000003 syscall=11 success=yes exit=0 a0=bfbec580 a1=b830ae58 a2=bfbeae98 a3=bfbeae98 items=0 ppid=10463 pid=11167 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643322.690:131): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643322.690:131): arch=40000003 syscall=11 success=yes exit=0 a0=bfcbda41 a1=99a8268 a2=999eb48 a3=999ed25 items=0 ppid=11167 pid=11169 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hostname" exe="/bin/hostname" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643322.747:132): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643322.747:132): arch=40000003 syscall=11 success=yes exit=0 a0=21203e a1=bfcbc9a8 a2=999eb48 a3=400 items=0 ppid=11167 pid=11170 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643322.790:133): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643322.790:133): arch=40000003 syscall=11 success=yes exit=0 a0=93b7b10 a1=93b7ba8 a2=93b6d58 a3=0 items=0 ppid=11170 pid=11171 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643322.856:134): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643322.856:134): arch=40000003 syscall=11 success=yes exit=0 a0=bfcbda2d a1=9cb3ad8 a2=999eb48 a3=9c99405 items=0 ppid=11172 pid=11174 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2lava-wrappe" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643322.905:135): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643322.905:135): arch=40000003 syscall=11 success=yes exit=0 a0=95fa6b8 a1=95fd228 a2=95f9d58 a3=40 items=0 ppid=11174 pid=11175 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="basename" exe="/bin/basename" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643322.939:136): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643322.939:136): arch=40000003 syscall=11 success=yes exit=0 a0=95fdc48 a1=95fdeb8 a2=95fdd98 a3=0 items=0 ppid=11174 pid=11176 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="logger" exe="/usr/bin/logger" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643323.131:137): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643323.131:137): arch=40000003 syscall=11 success=yes exit=0 a0=95fa658 a1=95fa738 a2=95fdd98 a3=40 items=0 ppid=11174 pid=11178 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="gs" exe="/usr/bin/gs" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643324.169:138): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643324.169:138): arch=40000003 syscall=11 success=yes exit=0 a0=9601bd8 a1=95f9e20 a2=95fdd98 a3=40 items=0 ppid=11174 pid=11179 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="expr" exe="/usr/bin/expr" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643324.183:139): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:bin_t:s0 tclass=process >type=SELINUX_ERR msg=audit(1198643324.185:140): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:bin_t:s0 tclass=process >type=SELINUX_ERR msg=audit(1198643324.186:141): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643324.186:141): arch=40000003 syscall=11 success=yes exit=0 a0=9605b70 a1=9600d98 a2=96084d8 a3=40 items=0 ppid=11174 pid=11182 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="gs" exe="/usr/bin/gs" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643324.204:142): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643324.204:142): arch=40000003 syscall=11 success=yes exit=0 a0=9605b60 a1=9605c98 a2=96084d8 a3=40 items=0 ppid=11174 pid=11181 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cat" exe="/bin/cat" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1198643324.183:139): arch=40000003 syscall=11 success=yes exit=0 a0=9607e50 a1=9604c48 a2=96084d8 a3=40 items=0 ppid=11174 pid=11180 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2zjs-pstops" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643324.232:143): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643324.232:143): arch=40000003 syscall=11 success=yes exit=0 a0=9cb5570 a1=9cb3598 a2=9cb5ae0 a3=40 items=0 ppid=11180 pid=11184 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="expr" exe="/usr/bin/expr" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643324.243:144): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643324.185:140): arch=40000003 syscall=11 success=yes exit=0 a0=9604bf8 a1=95fa480 a2=96084d8 a3=40 items=0 ppid=11174 pid=11183 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2lava" exe="/usr/bin/foo2lava" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1198643324.243:144): arch=40000003 syscall=11 success=yes exit=0 a0=9cb6348 a1=9cb2fd0 a2=9cb5ae0 a3=0 items=0 ppid=11180 pid=11185 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sed" exe="/bin/sed" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643326.035:145): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643326.035:145): arch=40000003 syscall=11 success=yes exit=0 a0=238dfd a1=bfda305c a2=bfda58d0 a3=400 items=0 ppid=11182 pid=11186 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643326.038:146): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643326.038:146): arch=40000003 syscall=11 success=yes exit=0 a0=813ab00 a1=813ac68 a2=8139e38 a3=0 items=0 ppid=11186 pid=11187 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cat" exe="/bin/cat" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643327.105:147): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643327.105:147): arch=40000003 syscall=11 success=yes exit=0 a0=9604b70 a1=95fd510 a2=96084d8 a3=0 items=0 ppid=11174 pid=11188 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="logger" exe="/usr/bin/logger" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643327.109:148): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643327.109:148): arch=40000003 syscall=11 success=yes exit=0 a0=9604a60 a1=9606c68 a2=96084d8 a3=0 items=0 ppid=11174 pid=11189 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="logger" exe="/usr/bin/logger" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1198643351.072:149): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.165:150): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.171:151): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.176:152): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.184:153): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.192:154): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.197:155): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.202:156): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.208:157): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.213:158): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.218:159): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.223:160): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.228:161): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.233:162): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.239:163): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.244:164): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.250:165): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643361.256:166): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198643382.412:167): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=SELINUX_ERR msg=audit(1198643419.930:168): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SELINUX_ERR msg=audit(1198643419.931:169): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643419.931:169): arch=40000003 syscall=11 success=yes exit=0 a0=bfbec580 a1=b8a9b438 a2=bfbeae98 a3=bfbeae98 items=0 ppid=10463 pid=11194 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643419.932:170): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643419.930:168): arch=40000003 syscall=11 success=yes exit=0 a0=bfbec580 a1=b8a9b438 a2=bfbeae98 a3=bfbeae98 items=0 ppid=10463 pid=11193 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="pstops" exe="/usr/lib/cups/filter/pstops" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1198643419.932:170): arch=40000003 syscall=11 success=yes exit=0 a0=bfbec580 a1=b8a9b438 a2=bfbeae98 a3=bfbeae98 items=0 ppid=10463 pid=11195 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="socket" exe="/usr/lib/cups/backend/socket" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.312:171): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.312:171): arch=40000003 syscall=11 success=yes exit=0 a0=bfcc49f1 a1=8e492c0 a2=8e3fb48 a3=8e3fd25 items=0 ppid=11194 pid=11197 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hostname" exe="/bin/hostname" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.349:172): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.349:172): arch=40000003 syscall=11 success=yes exit=0 a0=21203e a1=bfcc3958 a2=8e3fb48 a3=400 items=0 ppid=11194 pid=11198 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.368:173): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.368:173): arch=40000003 syscall=11 success=yes exit=0 a0=8814b10 a1=8814ba8 a2=8813d58 a3=0 items=0 ppid=11198 pid=11199 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.399:174): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.399:174): arch=40000003 syscall=11 success=yes exit=0 a0=bfcc49dd a1=9154f68 a2=8e3fb48 a3=8e48d45 items=0 ppid=11200 pid=11202 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2lava-wrappe" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.402:175): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.402:175): arch=40000003 syscall=11 success=yes exit=0 a0=95096c8 a1=9509830 a2=9508d58 a3=40 items=0 ppid=11202 pid=11203 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="basename" exe="/bin/basename" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.417:176): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.417:176): arch=40000003 syscall=11 success=yes exit=0 a0=950cda8 a1=950d018 a2=950cef8 a3=0 items=0 ppid=11202 pid=11204 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="logger" exe="/usr/bin/logger" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.435:177): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.435:177): arch=40000003 syscall=11 success=yes exit=0 a0=9509658 a1=9509738 a2=950cef8 a3=40 items=0 ppid=11202 pid=11206 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="gs" exe="/usr/bin/gs" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.452:178): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.452:178): arch=40000003 syscall=11 success=yes exit=0 a0=9510c28 a1=9508e20 a2=950cef8 a3=40 items=0 ppid=11202 pid=11207 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="expr" exe="/usr/bin/expr" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.653:179): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.653:179): arch=40000003 syscall=11 success=yes exit=0 a0=9516e50 a1=9513c68 a2=95174f8 a3=40 items=0 ppid=11202 pid=11208 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2zjs-pstops" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.655:180): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.655:180): arch=40000003 syscall=11 success=yes exit=0 a0=9514b20 a1=950fde8 a2=95174f8 a3=40 items=0 ppid=11202 pid=11210 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="gs" exe="/usr/bin/gs" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.656:181): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:bin_t:s0 tclass=process >type=SELINUX_ERR msg=audit(1198643420.657:182): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.657:182): arch=40000003 syscall=11 success=yes exit=0 a0=9514ab0 a1=9514b50 a2=95174f8 a3=40 items=0 ppid=11202 pid=11209 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cat" exe="/bin/cat" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.661:183): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.661:183): arch=40000003 syscall=11 success=yes exit=0 a0=8795570 a1=8793598 a2=8795ae0 a3=40 items=0 ppid=11208 pid=11212 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="expr" exe="/usr/bin/expr" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643420.665:184): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643420.656:181): arch=40000003 syscall=11 success=yes exit=0 a0=9513c18 a1=9509480 a2=95174f8 a3=40 items=0 ppid=11202 pid=11211 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2lava" exe="/usr/bin/foo2lava" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1198643420.665:184): arch=40000003 syscall=11 success=yes exit=0 a0=8796348 a1=8792fd0 a2=8795ae0 a3=0 items=0 ppid=11208 pid=11213 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sed" exe="/bin/sed" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643423.743:185): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198643423.743:185): arch=40000003 syscall=11 success=yes exit=0 a0=238dfd a1=bfed59ac a2=bfed8200 a3=400 items=0 ppid=11210 pid=11214 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643423.748:186): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643423.748:186): arch=40000003 syscall=11 success=yes exit=0 a0=8204b00 a1=8204c68 a2=8203e38 a3=0 items=0 ppid=11214 pid=11215 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cat" exe="/bin/cat" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643426.573:187): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643426.573:187): arch=40000003 syscall=11 success=yes exit=0 a0=9513b90 a1=950c5b8 a2=95174f8 a3=0 items=0 ppid=11202 pid=11216 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="logger" exe="/usr/bin/logger" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=SELINUX_ERR msg=audit(1198643426.576:188): security_compute_sid: invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process >type=SYSCALL msg=audit(1198643426.576:188): arch=40000003 syscall=11 success=yes exit=0 a0=9513a80 a1=9515c88 a2=95174f8 a3=0 items=0 ppid=11202 pid=11217 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="logger" exe="/usr/bin/logger" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=ANOM_ABEND msg=audit(1198643568.683:189): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=10997 comm="dbus-launch" sig=6 >type=CRED_DISP msg=audit(1198643990.598:190): user pid=9460 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1198643990.639:191): user pid=9460 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=SELINUX_ERR msg=audit(1198645261.676:192): security_compute_sid: invalid context unconfined_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:updpwd_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198645261.676:192): arch=40000003 syscall=11 success=yes exit=0 a0=147a18 a1=bfa4390c a2=149408 a3=400 items=0 ppid=11294 pid=11295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="unix_update" exe="/sbin/unix_update" subj=unconfined_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1198645261.760:193): user pid=11294 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198645261.789:194): user pid=11294 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198645261.789:195): login pid=11294 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1198645261.811:196): user pid=11294 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198645261.920:197): user pid=11294 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198645261.920:198): user pid=11294 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=SELINUX_ERR msg=audit(1198648861.304:199): security_compute_sid: invalid context unconfined_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:updpwd_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198648861.304:199): arch=40000003 syscall=11 success=yes exit=0 a0=147a18 a1=bfa4390c a2=149408 a3=400 items=0 ppid=11429 pid=11430 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="unix_update" exe="/sbin/unix_update" subj=unconfined_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1198648861.307:200): user pid=11429 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198648861.307:201): user pid=11429 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198648861.307:202): login pid=11429 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1198648861.309:203): user pid=11429 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198648861.315:204): user pid=11429 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198648861.315:205): user pid=11429 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198650509.182:206): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198650509.248:207): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1198650533.930:208): user pid=11074 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198650548.379:209): user pid=11498 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198650548.379:210): user pid=11498 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198650548.443:211): user pid=11498 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1198650560.847:212): user pid=11498 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198650568.233:213): user pid=11517 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198650568.233:214): user pid=11517 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198650568.241:215): user pid=11517 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198650603.763:216): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198650603.766:217): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1198650609.219:218): user pid=11517 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198650614.961:219): user pid=11527 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198650614.961:220): user pid=11527 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198650614.970:221): user pid=11527 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1198650644.519:222): user pid=11527 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198650649.759:223): user pid=11536 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198650649.759:224): user pid=11536 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198650649.767:225): user pid=11536 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1198651326.239:226): user pid=11536 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198651435.759:227): user pid=11576 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198651435.759:228): user pid=11576 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198651435.769:229): user pid=11576 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1198651622.219:230): user pid=11576 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198651760.236:231): user pid=11601 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198651760.236:232): user pid=11601 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198651760.252:233): user pid=11601 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1198651764.437:234): user pid=11601 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198651824.574:235): user pid=11614 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198651824.574:236): user pid=11614 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198651824.581:237): user pid=11614 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198651830.078:238): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198651830.082:239): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1198651833.188:240): user pid=11614 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198652099.115:241): user pid=11643 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198652099.115:242): user pid=11643 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198652099.123:243): user pid=11643 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198652105.315:244): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198652105.319:245): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1198652139.530:246): user pid=11643 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198652144.409:247): user pid=11652 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1198652144.409:248): user pid=11652 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1198652144.418:249): user pid=11652 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1198652385.357:250): user pid=11652 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=SELINUX_ERR msg=audit(1198652461.669:251): security_compute_sid: invalid context unconfined_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:updpwd_exec_t:s0 tclass=process >type=SYSCALL msg=audit(1198652461.669:251): arch=40000003 syscall=11 success=yes exit=0 a0=147a18 a1=bfa4390c a2=149408 a3=400 items=0 ppid=11692 pid=11693 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="unix_update" exe="/sbin/unix_update" subj=unconfined_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1198652461.672:252): user pid=11692 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198652461.673:253): user pid=11692 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198652461.673:254): login pid=11692 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1198652461.674:255): user pid=11692 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198652461.680:256): user pid=11692 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198652461.680:257): user pid=11692 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198655366.700:258): user pid=2941 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1198655366.700:259): user pid=3010 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1198655366.829:260): user pid=3010 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1198655366.829:261): user pid=2941 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1198655367.461:262): user pid=2530 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198655367.461:263): user pid=2530 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1198655383.853:1195): auditd normal halt, sending auid=4294967295 pid=12221 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1747 >type=DAEMON_START msg=audit(1198655437.452:8917): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1797 res=success, auditd pid=1797 >type=CONFIG_CHANGE msg=audit(1198655437.553:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1198655437.553:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1198655437.586:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1198655437.586:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=LABEL_LEVEL_CHANGE msg=audit(1198655451.283:8): user pid=2292 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198655451.440:9): user pid=2292 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1198655470.131:10): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198655470.139:11): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198655470.140:12): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198655470.149:13): login pid=2590 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198655470.175:14): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198655470.240:15): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198655470.241:16): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198656061.862:17): user pid=2962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198656061.863:18): user pid=2962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198656061.863:19): login pid=2962 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198656061.872:20): user pid=2962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198656061.905:21): user pid=2962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198656061.905:22): user pid=2962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198659661.919:23): user pid=3231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198659661.919:24): user pid=3231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198659661.920:25): login pid=3231 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198659661.926:26): user pid=3231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198659661.930:27): user pid=3231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198659661.930:28): user pid=3231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198663262.089:29): user pid=10538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198663262.090:30): user pid=10538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198663262.090:31): login pid=10538 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198663262.110:32): user pid=10538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198663262.119:33): user pid=10538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198663262.119:34): user pid=10538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198663321.126:35): user pid=10544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198663321.127:36): user pid=10544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198663321.127:37): login pid=10544 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198663321.134:38): user pid=10544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198664033.869:39): user pid=10544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198664033.869:40): user pid=10544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198666861.883:41): user pid=12648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198666861.884:42): user pid=12648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198666861.884:43): login pid=12648 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198666861.891:44): user pid=12648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198666861.896:45): user pid=12648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198666861.897:46): user pid=12648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198670461.909:47): user pid=12787 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198670461.909:48): user pid=12787 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198670461.909:49): login pid=12787 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198670461.917:50): user pid=12787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198670461.922:51): user pid=12787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198670461.922:52): user pid=12787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198674061.935:53): user pid=12948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198674061.936:54): user pid=12948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198674061.936:55): login pid=12948 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198674061.944:56): user pid=12948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198674061.948:57): user pid=12948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198674061.949:58): user pid=12948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198677661.962:59): user pid=13191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198677661.963:60): user pid=13191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198677661.963:61): login pid=13191 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198677661.973:62): user pid=13191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198677661.976:63): user pid=13191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198677661.977:64): user pid=13191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198681261.990:65): user pid=13327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198681261.990:66): user pid=13327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198681261.990:67): login pid=13327 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198681261.998:68): user pid=13327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198681262.003:69): user pid=13327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198681262.003:70): user pid=13327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198684861.018:71): user pid=13942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198684861.019:72): user pid=13942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198684861.019:73): login pid=13942 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198684861.025:74): user pid=13942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198684861.029:75): user pid=13942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198684861.030:76): user pid=13942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198688461.043:77): user pid=14078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198688461.044:78): user pid=14078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198688461.044:79): login pid=14078 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198688461.049:80): user pid=14078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198688461.053:81): user pid=14078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198688461.053:82): user pid=14078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198692061.067:83): user pid=14219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198692061.067:84): user pid=14219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198692061.067:85): login pid=14219 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198692061.075:86): user pid=14219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198692061.080:87): user pid=14219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198692061.081:88): user pid=14219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198693189.312:89): user pid=14296 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198693189.312:90): user pid=14296 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198693189.359:91): user pid=14296 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198693276.054:92): user pid=14296 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198693284.222:93): user pid=14308 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198693284.222:94): user pid=14308 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198693284.233:95): user pid=14308 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198693353.488:96): user pid=14308 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198693364.804:97): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198693364.805:98): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198693382.250:99): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1198693382.251:100): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1198693395.323:101): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1198693395.323:102): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1198693415.262:103): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1198693415.262:104): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1198693424.645:105): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198693424.652:106): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198693424.653:107): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198693424.654:108): login pid=2590 uid=0 old auid=500 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198693424.717:109): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198693424.748:110): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198693424.748:111): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198693446.649:112): user pid=14562 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198693446.649:113): user pid=14562 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198693446.658:114): user pid=14562 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198693496.215:115): user pid=14562 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198693501.991:116): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198693501.991:117): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198693513.094:118): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198693513.101:119): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198693513.102:120): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198693513.103:121): login pid=2590 uid=0 old auid=500 new auid=501 >type=USER_ROLE_CHANGE msg=audit(1198693513.123:122): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198693513.135:123): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198693513.136:124): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1198693566.236:125): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198693566.236:126): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198693581.190:127): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198693581.196:128): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198693581.196:129): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198693581.197:130): login pid=2590 uid=0 old auid=501 new auid=501 >type=USER_ROLE_CHANGE msg=audit(1198693581.215:131): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198693581.229:132): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198693581.230:133): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1198693619.833:134): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198693619.834:135): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198693648.408:136): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198693648.413:137): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198693648.414:138): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198693648.415:139): login pid=2590 uid=0 old auid=501 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198693648.432:140): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198693648.444:141): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198693648.445:142): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198693661.561:143): user pid=15039 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198693661.561:144): user pid=15039 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198693661.570:145): user pid=15039 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198693914.392:146): user pid=15094 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1198693914.395:147): user pid=15094 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1198693914.406:148): user pid=15094 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1198693914.406:149): user pid=15094 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1198693979.499:150): user pid=15132 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1198693979.499:151): user pid=15132 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1198693979.504:152): user pid=15132 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1198693979.504:153): user pid=15132 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1198694005.349:154): user pid=15132 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1198694005.350:155): user pid=15132 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1198694006.214:156): user pid=15094 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1198694006.214:157): user pid=15094 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1198694014.281:158): user pid=15178 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1198694014.284:159): user pid=15178 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1198694014.293:160): user pid=15178 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1198694014.293:161): user pid=15178 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1198694024.678:162): user pid=15178 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1198694024.678:163): user pid=15178 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1198694036.889:164): user pid=15222 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1198694036.891:165): user pid=15222 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1198694036.905:166): user pid=15222 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1198694036.905:167): user pid=15222 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1198694041.144:168): user pid=15222 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1198694041.144:169): user pid=15222 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1198694054.621:170): user pid=15039 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198694060.693:171): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198694060.693:172): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198694071.404:173): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198694071.411:174): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198694071.411:175): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198694071.412:176): login pid=2590 uid=0 old auid=500 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198694071.431:177): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198694071.445:178): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198694071.446:179): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1198694155.653:180): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198694155.654:181): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198694168.877:182): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198694168.884:183): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198694168.885:184): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198694168.886:185): login pid=2590 uid=0 old auid=500 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198694168.906:186): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198694168.921:187): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198694168.922:188): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1198694212.889:189): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198694212.889:190): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198694229.166:191): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198694229.172:192): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198694229.172:193): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198694229.173:194): login pid=2590 uid=0 old auid=500 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198694229.193:195): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198694229.208:196): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198694229.208:197): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198694254.143:198): user pid=15994 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198694254.144:199): user pid=15994 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198694254.153:200): user pid=15994 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198694520.894:201): user pid=15994 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198694527.460:202): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198694527.460:203): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198694537.441:204): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198694537.448:205): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198694537.448:206): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198694537.449:207): login pid=2590 uid=0 old auid=500 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198694537.468:208): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198694537.481:209): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198694537.482:210): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1198694720.937:211): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198694720.937:212): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198694733.683:213): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198694733.688:214): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198694733.688:215): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198694733.689:216): login pid=2590 uid=0 old auid=500 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1198694733.708:217): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198694733.723:218): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198694733.723:219): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1198694843.337:220): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198694843.337:221): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198694861.449:222): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1198694861.449:223): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1198694872.532:224): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198694872.540:225): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198694872.540:226): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198694872.541:227): login pid=2590 uid=0 old auid=0 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198694872.563:228): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198694872.577:229): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198694872.577:230): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1198694887.919:231): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198694887.919:232): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198694897.780:233): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198694897.784:234): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198694897.785:235): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198694897.787:236): login pid=2590 uid=0 old auid=500 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1198694897.801:237): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198694897.817:238): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198694897.817:239): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198694912.132:240): user pid=17452 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198694912.132:241): user pid=17452 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198694912.146:242): user pid=17452 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198694934.260:243): user pid=17452 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198694938.751:244): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198694938.751:245): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198694948.294:246): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198694948.301:247): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198694948.301:248): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198694948.303:249): login pid=2590 uid=0 old auid=0 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198694948.324:250): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198694948.338:251): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198694948.338:252): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1198694949.619:253): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17607 comm="root" sig=11 >type=ANOM_ABEND msg=audit(1198694949.621:254): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17615 comm="root" sig=11 >type=USER_AUTH msg=audit(1198695563.866:255): user pid=19131 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_ACCT msg=audit(1198695563.869:256): user pid=19131 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_START msg=audit(1198695563.878:257): user pid=19131 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=CRED_ACQ msg=audit(1198695563.878:258): user pid=19131 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=CRED_DISP msg=audit(1198695574.566:259): user pid=19131 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_END msg=audit(1198695574.567:260): user pid=19131 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=ANOM_ABEND msg=audit(1198695577.383:261): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19172 comm="root" sig=11 >type=USER_AUTH msg=audit(1198695653.130:262): user pid=19179 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_ACCT msg=audit(1198695653.134:263): user pid=19179 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_START msg=audit(1198695653.145:264): user pid=19179 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=CRED_ACQ msg=audit(1198695653.145:265): user pid=19179 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_ACCT msg=audit(1198695661.099:266): user pid=19212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198695661.099:267): user pid=19212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198695661.100:268): login pid=19212 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198695661.106:269): user pid=19212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198695661.111:270): user pid=19212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198695661.111:271): user pid=19212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198695673.463:272): user pid=19179 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_END msg=audit(1198695673.464:273): user pid=19179 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=ANOM_ABEND msg=audit(1198695676.120:274): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19215 comm="root" sig=11 >type=USER_END msg=audit(1198695692.548:275): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198695692.549:276): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1198695702.173:277): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198695702.181:278): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198695702.181:279): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198695702.182:280): login pid=2590 uid=0 old auid=500 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198695702.203:281): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198695702.219:282): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198695702.220:283): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198698046.120:284): user pid=22223 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198698046.227:285): user pid=22223 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1198699261.383:286): user pid=16622 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198699261.383:287): user pid=16622 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198699261.384:288): login pid=16622 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198699261.390:289): user pid=16622 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198699261.448:290): user pid=16622 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198699261.449:291): user pid=16622 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198702861.572:292): user pid=14298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198702861.572:293): user pid=14298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198702861.573:294): login pid=14298 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198702861.593:295): user pid=14298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198702861.626:296): user pid=14298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198702861.626:297): user pid=14298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198706461.657:298): user pid=14459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198706461.658:299): user pid=14459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198706461.658:300): login pid=14459 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198706461.666:301): user pid=14459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198706461.710:302): user pid=14459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198706461.711:303): user pid=14459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198708285.359:304): user pid=14547 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198708285.359:305): user pid=14547 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198708285.449:306): user pid=14547 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198710061.727:307): user pid=20344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198710061.728:308): user pid=20344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198710061.728:309): login pid=20344 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198710061.735:310): user pid=20344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198710061.742:311): user pid=20344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198710061.742:312): user pid=20344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1198710195.649:313): avc: denied { getattr } for pid=20352 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198710195.649:313): arch=40000003 syscall=195 success=yes exit=0 a0=b8119ff0 a1=bf977620 a2=5e1ff4 a3=b8119ff0 items=0 ppid=2056 pid=20352 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1198710195.665:314): avc: denied { read } for pid=20352 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198710195.665:314): arch=40000003 syscall=5 success=yes exit=4 a0=b8119ff0 a1=8000 a2=1b6 a3=b8119160 items=0 ppid=2056 pid=20352 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1198710195.672:315): user pid=20352 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1198710195.677:316): user pid=20352 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1198710200.146:317): user pid=20352 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198710200.150:318): user pid=20352 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198710200.210:319): user pid=20352 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1198710200.212:320): login pid=20352 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1198710200.212:321): user pid=20352 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198710200.214:322): user pid=20362 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1198710203.625:323): user pid=20352 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1198710203.625:324): user pid=20352 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_AUTH msg=audit(1198710684.707:325): user pid=20448 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198710684.707:326): user pid=20448 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198710684.729:327): user pid=20448 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198710697.188:328): user pid=20448 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1198712112.339:329): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20575 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198712151.241:330): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20597 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198712252.107:331): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20615 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198712266.528:332): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20630 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198712614.283:333): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20665 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198712668.896:334): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20675 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198712740.327:335): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20692 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198712781.297:336): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20698 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198712839.765:337): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20701 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198712856.902:338): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20702 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198712894.120:339): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20709 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198712969.370:340): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20742 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198712990.618:341): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20749 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198713057.553:342): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20756 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198713488.962:343): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20841 comm="gs" sig=11 >type=USER_ACCT msg=audit(1198713661.904:344): user pid=30666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198713661.923:345): user pid=30666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198713661.924:346): login pid=30666 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198713661.930:347): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198713661.978:348): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198713661.979:349): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198714033.867:350): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2478 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198714146.780:351): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2487 comm="gs.foo" sig=11 >type=ANOM_ABEND msg=audit(1198714277.415:352): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2510 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198714387.575:353): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2517 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198714452.598:354): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2521 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198714944.596:355): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2584 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198714981.280:356): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2588 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198715434.836:357): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2643 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198715644.413:358): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2689 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198715692.743:359): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2726 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198715699.670:360): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2745 comm="gs" sig=11 >type=USER_ACCT msg=audit(1198717261.258:361): user pid=2830 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198717261.278:362): user pid=2830 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198717261.278:363): login pid=2830 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198717261.286:364): user pid=2830 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198717261.335:365): user pid=2830 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198717261.336:366): user pid=2830 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198718510.255:367): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2894 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198718563.819:368): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2899 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198718589.562:369): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2903 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198719916.724:370): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3430 comm="gs" sig=11 >type=USER_ACCT msg=audit(1198720861.350:371): user pid=3535 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198720861.350:372): user pid=3535 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198720861.350:373): login pid=3535 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198720861.356:374): user pid=3535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198720861.362:375): user pid=3535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198720861.362:376): user pid=3535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198721492.534:377): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3587 comm="gs" sig=11 >type=USER_ACCT msg=audit(1198724461.501:378): user pid=3759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198724461.528:379): user pid=3759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198724461.529:380): login pid=3759 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198724461.534:381): user pid=3759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198724461.579:382): user pid=3759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198724461.579:383): user pid=3759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198728061.605:384): user pid=3926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198728061.605:385): user pid=3926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198728061.605:386): login pid=3926 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198728061.613:387): user pid=3926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198728061.618:388): user pid=3926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198728061.618:389): user pid=3926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198731661.632:390): user pid=4092 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198731661.633:391): user pid=4092 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198731661.633:392): login pid=4092 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198731661.641:393): user pid=4092 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198731661.646:394): user pid=4092 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198731661.647:395): user pid=4092 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198735261.660:396): user pid=4264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198735261.661:397): user pid=4264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198735261.661:398): login pid=4264 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198735261.668:399): user pid=4264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198735261.673:400): user pid=4264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198735261.673:401): user pid=4264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198737456.176:402): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4755 comm="gs" sig=11 >type=USER_ACCT msg=audit(1198738861.687:403): user pid=5694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198738861.688:404): user pid=5694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198738861.688:405): login pid=5694 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198738861.697:406): user pid=5694 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198738861.702:407): user pid=5694 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198738861.702:408): user pid=5694 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198742461.716:409): user pid=6289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198742461.716:410): user pid=6289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198742461.717:411): login pid=6289 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198742461.726:412): user pid=6289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198742461.730:413): user pid=6289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198742461.730:414): user pid=6289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198746061.744:415): user pid=6909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198746061.745:416): user pid=6909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198746061.745:417): login pid=6909 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198746061.752:418): user pid=6909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198746061.758:419): user pid=6909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198746061.758:420): user pid=6909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198749661.772:421): user pid=7068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198749661.773:422): user pid=7068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198749661.773:423): login pid=7068 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198749661.779:424): user pid=7068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198749661.785:425): user pid=7068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198749661.785:426): user pid=7068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198749721.792:427): user pid=7074 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198749721.793:428): user pid=7074 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198749721.793:429): login pid=7074 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198749721.801:430): user pid=7074 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198750283.621:431): user pid=7074 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198750283.641:432): user pid=7074 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1198752979.689:433): avc: denied { getattr } for pid=10320 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198752979.689:433): arch=40000003 syscall=195 success=yes exit=0 a0=b8519c38 a1=bf97c620 a2=5e1ff4 a3=b8519c38 items=0 ppid=2056 pid=10320 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1198752979.689:434): avc: denied { read } for pid=10320 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198752979.689:434): arch=40000003 syscall=5 success=yes exit=4 a0=b8519c38 a1=8000 a2=1b6 a3=b8518da8 items=0 ppid=2056 pid=10320 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1198752979.791:435): user pid=10320 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1198752979.792:436): user pid=10320 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1198752982.933:437): user pid=10320 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198752983.007:438): user pid=10320 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198752983.214:439): user pid=10320 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1198752983.237:440): login pid=10320 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1198752983.237:441): user pid=10320 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198752983.239:442): user pid=10324 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1198752984.745:443): user pid=10320 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1198752984.746:444): user pid=10320 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198753261.679:445): user pid=10382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198753261.680:446): user pid=10382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198753261.680:447): login pid=10382 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198753261.686:448): user pid=10382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198753261.691:449): user pid=10382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198753261.692:450): user pid=10382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198754030.573:451): user pid=10418 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198754030.573:452): user pid=10418 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198754030.663:453): user pid=10418 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198754128.244:454): user pid=10418 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1198754382.877:455): dev=eth0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1198754382.877:455): arch=40000003 syscall=5 per=400000 success=yes exit=174 a0=bfebaab2 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=11808 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1198754810.290:456): dev=eth0 prom=0 old_prom=256 auid=500 >type=SYSCALL msg=audit(1198754810.290:456): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=ae a1=0 a2=b41f912c a3=9a4d320 items=0 ppid=1 pid=11821 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1198754810.312:457): dev=eth0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1198754810.312:457): arch=40000003 syscall=5 per=400000 success=yes exit=174 a0=b41f9102 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=11821 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1198754811.579:458): dev=eth0 prom=0 old_prom=256 auid=500 >type=SYSCALL msg=audit(1198754811.579:458): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=ae a1=0 a2=bfebb06c a3=9b47f28 items=0 ppid=1 pid=11808 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1198755841.547:459): dev=eth0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1198755841.547:459): arch=40000003 syscall=5 per=400000 success=yes exit=130 a0=bfc7b802 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=11902 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1198755851.343:460): dev=eth0 prom=0 old_prom=256 auid=500 >type=SYSCALL msg=audit(1198755851.343:460): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=82 a1=0 a2=234814c a3=91d0938 items=0 ppid=1 pid=11905 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1198755851.343:461): dev=eth0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1198755851.343:461): arch=40000003 syscall=5 per=400000 success=yes exit=130 a0=23480e2 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=11905 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1198756022.440:462): dev=eth0 prom=0 old_prom=256 auid=500 >type=SYSCALL msg=audit(1198756022.440:462): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=82 a1=0 a2=bfc7bd9c a3=b6e1fce8 items=0 ppid=1 pid=11902 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1198756041.615:463): dev=eth0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1198756041.615:463): arch=40000003 syscall=5 per=400000 success=yes exit=160 a0=bfb12482 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=11936 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1198756076.928:464): dev=eth0 prom=0 old_prom=256 auid=500 >type=SYSCALL msg=audit(1198756076.928:464): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=a0 a1=0 a2=bfb12a3c a3=8837688 items=0 ppid=1 pid=11936 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_ACCT msg=audit(1198756861.801:465): user pid=11994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198756861.837:466): user pid=11994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198756861.837:467): login pid=11994 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198756861.891:468): user pid=11994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198756862.181:469): user pid=11994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198756862.181:470): user pid=11994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1198757174.775:471): avc: denied { getattr } for pid=12023 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198757174.775:471): arch=40000003 syscall=195 success=yes exit=0 a0=b8f19c38 a1=bfb66810 a2=5e1ff4 a3=b8f19c38 items=0 ppid=2056 pid=12023 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1198757174.775:472): avc: denied { read } for pid=12023 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198757174.775:472): arch=40000003 syscall=5 success=yes exit=4 a0=b8f19c38 a1=8000 a2=1b6 a3=b8f18da8 items=0 ppid=2056 pid=12023 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1198757174.833:473): user pid=12023 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198757174.995:474): user pid=12023 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=LOGIN msg=audit(1198757174.997:475): login pid=12023 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1198757174.997:476): user pid=12023 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198757174.999:477): user pid=12026 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1198757175.978:478): user pid=12023 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=USER_END msg=audit(1198757175.978:479): user pid=12023 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198760461.250:480): user pid=14494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198760461.251:481): user pid=14494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198760461.251:482): login pid=14494 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198760461.258:483): user pid=14494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198760461.282:484): user pid=14494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198760461.282:485): user pid=14494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198761490.979:486): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14716 comm="monitor" sig=11 >type=ANOM_ABEND msg=audit(1198761505.907:487): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14718 comm="monitor" sig=11 >type=ANOM_ABEND msg=audit(1198761594.565:488): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14725 comm="monitor" sig=11 >type=USER_ACCT msg=audit(1198764061.354:489): user pid=14896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198764061.360:490): user pid=14896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198764061.360:491): login pid=14896 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198764061.364:492): user pid=14896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198764061.369:493): user pid=14896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198764061.369:494): user pid=14896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198767661.381:495): user pid=15050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198767661.381:496): user pid=15050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198767661.382:497): login pid=15050 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198767661.386:498): user pid=15050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198767661.391:499): user pid=15050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198767661.391:500): user pid=15050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_CHAUTHTOK msg=audit(1198768289.689:501): user pid=15081 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=nut exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/15 res=success)' >type=USER_CHAUTHTOK msg=audit(1198768289.689:502): user pid=15081 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user to group acct=nut exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/15 res=success)' >type=USER_CHAUTHTOK msg=audit(1198768289.689:503): user pid=15081 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user to shadow group acct=nut exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/15 res=success)' >type=USER_CHAUTHTOK msg=audit(1198768293.741:504): user pid=15091 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=nut exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/15 res=failed)' >type=ANOM_ABEND msg=audit(1198769237.736:505): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16200 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1198771261.407:506): user pid=16300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198771261.407:507): user pid=16300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198771261.407:508): login pid=16300 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198771261.415:509): user pid=16300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198771261.421:510): user pid=16300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198771261.421:511): user pid=16300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1198771598.421:512): avc: denied { execmod } for pid=20389 comm="firefox-bin" path="/home/rick/.mozilla/plugins/nppdf.so" dev=dm-0 ino=28442626 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198771598.421:512): arch=40000003 syscall=125 success=yes exit=0 a0=564b000 a1=108000 a2=5 a3=bf88f5b0 items=0 ppid=20384 pid=20389 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="firefox-bin" exe="/usr/lib/firefox-2.0.0.10/firefox-bin" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_AUTH msg=audit(1198771714.452:513): user pid=16326 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198771714.452:514): user pid=16326 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198771714.546:515): user pid=16326 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198771778.362:516): user pid=16326 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1198771795.399:517): avc: denied { execmod } for pid=20389 comm="firefox-bin" path="/home/rick/.mozilla/plugins/nppdf.so" dev=dm-0 ino=28442626 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198771795.399:517): arch=40000003 syscall=125 success=yes exit=0 a0=1e54000 a1=108000 a2=5 a3=bf88f5b0 items=0 ppid=20384 pid=20389 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="firefox-bin" exe="/usr/lib/firefox-2.0.0.10/firefox-bin" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1198772114.185:518): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2359 comm="hald" sig=11 >type=ANOM_ABEND msg=audit(1198772114.224:519): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:hald_t:s0 pid=2400 comm="hald-addon-cpuf" sig=6 >type=ANOM_ABEND msg=audit(1198772535.305:520): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19541 comm="monitor" sig=11 >type=ANOM_ABEND msg=audit(1198773289.151:521): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19643 comm="monitor" sig=11 >type=ANOM_ABEND msg=audit(1198773313.560:522): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19679 comm="monitor" sig=11 >type=ANOM_ABEND msg=audit(1198773412.883:523): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19688 comm="monitor" sig=11 >type=ANOM_ABEND msg=audit(1198773463.426:524): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19693 comm="monitor" sig=11 >type=ANOM_ABEND msg=audit(1198773868.757:525): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19746 comm="monitor" sig=11 >type=USER_ACCT msg=audit(1198774861.690:526): user pid=19835 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198774861.691:527): user pid=19835 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198774861.691:528): login pid=19835 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198774861.698:529): user pid=19835 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198774861.749:530): user pid=19835 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198774861.749:531): user pid=19835 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1198777131.067:532): avc: denied { execmod } for pid=20389 comm="firefox-bin" path="/usr/lib/firefox-2.0.0.10/plugins/nppdf.so" dev=dm-0 ino=48404044 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1198777131.067:532): arch=40000003 syscall=125 success=yes exit=0 a0=6cfc000 a1=108000 a2=5 a3=bf8910e0 items=0 ppid=20384 pid=20389 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="firefox-bin" exe="/usr/lib/firefox-2.0.0.10/firefox-bin" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_AUTH msg=audit(1198777209.769:533): user pid=20103 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198777209.769:534): user pid=20103 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198777209.857:535): user pid=20103 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198777246.346:536): user pid=24990 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198777246.349:537): user pid=24990 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198777246.389:538): user pid=24990 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1198777246.389:539): user pid=24990 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1198777247.133:540): user pid=24990 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198777247.134:541): user pid=24990 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198777247.147:542): user pid=25014 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198777247.147:543): user pid=25014 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198777247.156:544): user pid=25014 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1198777247.156:545): user pid=25014 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1198777247.164:546): user pid=25014 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198777247.165:547): user pid=25014 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198777247.170:548): user pid=25018 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198777247.170:549): user pid=25018 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198777247.179:550): user pid=25018 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1198777247.180:551): user pid=25018 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1198777247.188:552): user pid=25018 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198777247.190:553): user pid=25018 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198777247.195:554): user pid=25022 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198777247.195:555): user pid=25022 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198777247.203:556): user pid=25022 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1198777247.204:557): user pid=25022 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1198777247.212:558): user pid=25022 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198777247.212:559): user pid=25022 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198777253.901:560): user pid=20103 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198778462.161:561): user pid=26805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198778462.162:562): user pid=26805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198778462.162:563): login pid=26805 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198778462.174:564): user pid=26805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198778462.220:565): user pid=26805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198778462.220:566): user pid=26805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198782061.232:567): user pid=26972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198782061.233:568): user pid=26972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198782061.233:569): login pid=26972 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198782061.240:570): user pid=26972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198782061.244:571): user pid=26972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198782061.244:572): user pid=26972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198785661.256:573): user pid=27138 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198785661.257:574): user pid=27138 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198785661.257:575): login pid=27138 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198785661.261:576): user pid=27138 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198785661.265:577): user pid=27138 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198785661.265:578): user pid=27138 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198789261.278:579): user pid=27299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198789261.279:580): user pid=27299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198789261.279:581): login pid=27299 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198789261.285:582): user pid=27299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198789261.289:583): user pid=27299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198789261.289:584): user pid=27299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198790681.259:585): user pid=27397 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198790681.259:586): user pid=27397 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198790681.374:587): user pid=27397 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198790742.120:588): user pid=27397 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198791298.672:589): user pid=27464 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198791298.672:590): user pid=27464 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198791298.700:591): user pid=27464 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198791511.978:592): user pid=27464 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198792861.314:593): user pid=1107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198792861.315:594): user pid=1107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198792861.315:595): login pid=1107 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198792861.321:596): user pid=1107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198792861.326:597): user pid=1107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198792861.327:598): user pid=1107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1198793406.870:599): avc: denied { read } for pid=4717 comm="cvs" name="config" dev=dm-0 ino=23200189 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198793406.870:599): arch=40000003 syscall=5 success=yes exit=3 a0=90c6640 a1=8000 a2=1b6 a3=90c6b60 items=0 ppid=4630 pid=4717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1198793406.891:600): avc: denied { getattr } for pid=4717 comm="cvs" path="/home/cvs/CVSROOT/config" dev=dm-0 ino=23200189 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198793406.891:600): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=bf90781c a2=776ff4 a3=90c6b60 items=0 ppid=4630 pid=4717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1198793406.922:601): user pid=4717 uid=0 auid=500 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198793406.925:602): user pid=4717 uid=0 auid=500 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198793463.616:603): user pid=5084 uid=0 auid=500 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198793463.619:604): user pid=5084 uid=0 auid=500 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198796461.488:605): user pid=23785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198796461.488:606): user pid=23785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198796461.489:607): login pid=23785 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198796461.507:608): user pid=23785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198796461.574:609): user pid=23785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198796461.576:610): user pid=23785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198800062.034:611): user pid=17079 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198800062.046:612): user pid=17079 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198800062.046:613): login pid=17079 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198800062.089:614): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198800062.398:615): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198800062.399:616): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198803661.783:617): user pid=7707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198803661.783:618): user pid=7707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198803661.783:619): login pid=7707 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198803661.854:620): user pid=7707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198803662.205:621): user pid=7707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198803662.205:622): user pid=7707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198807261.622:623): user pid=32646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198807261.634:624): user pid=32646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198807261.634:625): login pid=32646 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198807261.680:626): user pid=32646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198807261.970:627): user pid=32646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198807261.970:628): user pid=32646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198810863.411:629): user pid=23648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198810863.454:630): user pid=23648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198810863.454:631): login pid=23648 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198810863.726:632): user pid=23648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198810864.400:633): user pid=23648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198810864.400:634): user pid=23648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198813865.665:635): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9881 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1198814461.634:636): user pid=14238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198814461.662:637): user pid=14238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198814461.662:638): login pid=14238 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198814461.700:639): user pid=14238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198814462.064:640): user pid=14238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198814462.065:641): user pid=14238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198818062.200:642): user pid=5194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198818062.201:643): user pid=5194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198818062.201:644): login pid=5194 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198818062.223:645): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198818062.292:646): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198818062.292:647): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198821661.306:648): user pid=27447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198821661.307:649): user pid=27447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198821661.307:650): login pid=27447 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198821661.313:651): user pid=27447 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198821661.318:652): user pid=27447 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198821661.318:653): user pid=27447 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198825261.332:654): user pid=20340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198825261.333:655): user pid=20340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198825261.333:656): login pid=20340 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198825261.342:657): user pid=20340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198825261.347:658): user pid=20340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198825261.347:659): user pid=20340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198828861.362:660): user pid=11139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198828861.362:661): user pid=11139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198828861.362:662): login pid=11139 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198828861.369:663): user pid=11139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198828861.373:664): user pid=11139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198828861.373:665): user pid=11139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198832461.386:666): user pid=4395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198832461.386:667): user pid=4395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198832461.386:668): login pid=4395 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198832461.394:669): user pid=4395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198832461.398:670): user pid=4395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198832461.399:671): user pid=4395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198836061.470:672): user pid=28171 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198836061.493:673): user pid=28171 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198836061.493:674): login pid=28171 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198836061.499:675): user pid=28171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198836061.505:676): user pid=28171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198836061.505:677): user pid=28171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198836121.511:678): user pid=28600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198836121.512:679): user pid=28600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198836121.512:680): login pid=28600 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198836121.517:681): user pid=28600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198836732.716:682): user pid=28600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198836732.717:683): user pid=28600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198839661.818:684): user pid=22410 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198839661.819:685): user pid=22410 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198839661.819:686): login pid=22410 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198839661.828:687): user pid=22410 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198839661.855:688): user pid=22410 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198839661.855:689): user pid=22410 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198843261.870:690): user pid=15049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198843261.870:691): user pid=15049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198843261.870:692): login pid=15049 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198843261.878:693): user pid=15049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198843261.884:694): user pid=15049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198843261.884:695): user pid=15049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198846861.897:696): user pid=6492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198846861.898:697): user pid=6492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198846861.898:698): login pid=6492 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198846861.905:699): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198846861.910:700): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198846861.910:701): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198850461.960:702): user pid=29881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198850461.961:703): user pid=29881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198850461.961:704): login pid=29881 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198850461.968:705): user pid=29881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198850461.973:706): user pid=29881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198850461.973:707): user pid=29881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198854061.987:708): user pid=21408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198854061.988:709): user pid=21408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198854061.988:710): login pid=21408 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198854061.993:711): user pid=21408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198854061.998:712): user pid=21408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198854061.998:713): user pid=21408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198855197.756:714): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=29171 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1198857661.039:715): user pid=11742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198857661.040:716): user pid=11742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198857661.040:717): login pid=11742 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198857661.047:718): user pid=11742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198857661.052:719): user pid=11742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198857661.053:720): user pid=11742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198861261.067:721): user pid=2195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198861261.068:722): user pid=2195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198861261.068:723): login pid=2195 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198861261.074:724): user pid=2195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198861261.080:725): user pid=2195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198861261.081:726): user pid=2195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198864861.094:727): user pid=25299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198864861.095:728): user pid=25299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198864861.095:729): login pid=25299 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198864861.101:730): user pid=25299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198864861.106:731): user pid=25299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198864861.106:732): user pid=25299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198868461.120:733): user pid=16149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198868461.121:734): user pid=16149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198868461.121:735): login pid=16149 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198868461.129:736): user pid=16149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198868461.134:737): user pid=16149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198868461.134:738): user pid=16149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198872061.148:739): user pid=8719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198872061.148:740): user pid=8719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198872061.148:741): login pid=8719 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198872061.153:742): user pid=8719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198872061.176:743): user pid=8719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198872061.176:744): user pid=8719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198875661.249:745): user pid=31880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198875661.250:746): user pid=31880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198875661.250:747): login pid=31880 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198875661.256:748): user pid=31880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198875661.263:749): user pid=31880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198875661.263:750): user pid=31880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198877206.162:751): user pid=9344 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198877225.488:752): user pid=9464 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198879240.857:753): user pid=22144 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198879240.857:754): user pid=22144 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198879240.975:755): user pid=22144 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198879261.438:756): user pid=22341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198879261.439:757): user pid=22341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198879261.439:758): login pid=22341 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198879261.467:759): user pid=22341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198879261.498:760): user pid=22341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198879261.498:761): user pid=22341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198879269.959:762): user pid=22396 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198879269.959:763): user pid=22396 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198879269.966:764): user pid=22396 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198879300.524:765): user pid=22396 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1198879303.948:766): avc: denied { read } for pid=22696 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198879303.948:766): arch=40000003 syscall=5 success=yes exit=3 a0=808db78 a1=8000 a2=0 a3=8000 items=0 ppid=22555 pid=22696 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1198879303.948:767): avc: denied { ioctl } for pid=22696 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198879303.948:767): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bfaeb868 a3=bfaeb8a8 items=0 ppid=22555 pid=22696 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1198879303.948:768): avc: denied { getattr } for pid=22696 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198879303.948:768): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=8071068 a2=776ff4 a3=80877e8 items=0 ppid=22555 pid=22696 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=USER_END msg=audit(1198879577.944:769): user pid=22144 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198882861.941:770): user pid=18922 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198882861.941:771): user pid=18922 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198882861.942:772): login pid=18922 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198882861.972:773): user pid=18922 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198882862.148:774): user pid=18922 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198882862.148:775): user pid=18922 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1198883276.378:776): avc: denied { getattr } for pid=21802 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198883276.378:776): arch=40000003 syscall=195 success=yes exit=0 a0=b8f19c48 a1=bfe3bae0 a2=5e1ff4 a3=b8f19c48 items=0 ppid=2056 pid=21802 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1198883276.394:777): avc: denied { read } for pid=21802 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198883276.394:777): arch=40000003 syscall=5 success=yes exit=4 a0=b8f19c48 a1=8000 a2=1b6 a3=b8f18db8 items=0 ppid=2056 pid=21802 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1198883276.400:778): user pid=21802 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1198883276.401:779): user pid=21802 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1198883279.585:780): user pid=21802 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198883279.589:781): user pid=21802 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198883279.664:782): user pid=21802 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1198883279.665:783): login pid=21802 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1198883279.666:784): user pid=21802 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198883279.667:785): user pid=21832 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1198883279.856:786): user pid=21802 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1198883279.856:787): user pid=21802 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=AVC msg=audit(1198883544.520:788): avc: denied { search } for pid=23593 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1198883544.520:788): avc: denied { read } for pid=23593 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1198883544.520:788): arch=40000003 syscall=195 success=yes exit=0 a0=b92e6948 a1=bf804e4c a2=52bff4 a3=8170 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198883544.568:789): avc: denied { read } for pid=23593 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198883544.568:789): arch=40000003 syscall=5 success=yes exit=17 a0=b92e6cb0 a1=8000 a2=1b6 a3=8000 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198883544.586:790): avc: denied { getattr } for pid=23593 comm="httpd" path="/home/rick/public_html/.htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198883544.586:790): arch=40000003 syscall=197 success=yes exit=0 a0=11 a1=bf804d1c a2=52bff4 a3=b92e6cd8 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198883544.591:791): avc: denied { getattr } for pid=23593 comm="httpd" path="/home/rick/public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1198883544.591:791): arch=40000003 syscall=196 success=yes exit=0 a0=b92ef298 a1=bf804d4c a2=52bff4 a3=2008171 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198883544.591:792): avc: denied { getattr } for pid=23593 comm="httpd" path="/home/rick/public_html/photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1198883544.591:792): arch=40000003 syscall=196 success=yes exit=0 a0=b92ef298 a1=bf804d4c a2=52bff4 a3=2008171 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198883544.592:793): avc: denied { read } for pid=23593 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1198883544.592:793): arch=40000003 syscall=5 success=yes exit=17 a0=b92e69c8 a1=98800 a2=52d120 a3=64 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198883557.866:794): avc: denied { getattr } for pid=23600 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1198883557.866:794): arch=40000003 syscall=196 success=yes exit=0 a0=bf801da8 a1=bf801cfc a2=52bff4 a3=171 items=0 ppid=23587 pid=23600 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198883937.002:795): avc: denied { read } for pid=25965 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198883937.002:795): arch=40000003 syscall=5 success=yes exit=3 a0=8266bf8 a1=8000 a2=0 a3=8000 items=0 ppid=23598 pid=25965 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1198883937.002:796): avc: denied { ioctl } for pid=25965 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198883937.002:796): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bfc8cee8 a3=bfc8cf28 items=0 ppid=23598 pid=25965 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1198883937.002:797): avc: denied { getattr } for pid=25965 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198883937.002:797): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=824a068 a2=776ff4 a3=8260808 items=0 ppid=23598 pid=25965 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1198884105.241:798): avc: denied { read } for pid=23597 comm="httpd" name="m4v01167.mp4" dev=dm-0 ino=57835532 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1198884105.241:798): arch=40000003 syscall=5 success=yes exit=18 a0=b92f4210 a1=8000 a2=1b6 a3=8000 items=0 ppid=23587 pid=23597 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1198886461.225:799): user pid=7890 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198886461.251:800): user pid=7890 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198886461.251:801): login pid=7890 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198886461.257:802): user pid=7890 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198886461.265:803): user pid=7890 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198886461.265:804): user pid=7890 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198887378.604:805): user pid=13690 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198887378.604:806): user pid=13690 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198887378.696:807): user pid=13690 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198887405.563:808): user pid=13690 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198890061.650:809): user pid=30701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198890061.650:810): user pid=30701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198890061.651:811): login pid=30701 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198890061.674:812): user pid=30701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198890061.763:813): user pid=30701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198890061.764:814): user pid=30701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198893661.870:815): user pid=20183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198893661.890:816): user pid=20183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198893661.890:817): login pid=20183 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198893661.919:818): user pid=20183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198893661.938:819): user pid=20183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198893661.938:820): user pid=20183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198897262.050:821): user pid=11252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198897262.050:822): user pid=11252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198897262.051:823): login pid=11252 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198897262.072:824): user pid=11252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198897262.104:825): user pid=11252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198897262.104:826): user pid=11252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198900861.205:827): user pid=3950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198900861.206:828): user pid=3950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198900861.206:829): login pid=3950 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198900861.221:830): user pid=3950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198900861.248:831): user pid=3950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198900861.248:832): user pid=3950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198901417.500:833): user pid=7250 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198901417.500:834): user pid=7250 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198901417.611:835): user pid=7250 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_POLICY_LOAD msg=audit(1198901611.970:836): policy loaded auid=500 >type=SYSCALL msg=audit(1198901611.970:836): arch=40000003 syscall=4 success=yes exit=3990099 a0=4 a1=b7ba6000 a2=3ce253 a3=bfe8b2b8 items=0 ppid=8022 pid=8206 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_AVC msg=audit(1198901614.667:837): user pid=1959 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_ROLE_CHANGE msg=audit(1198901732.277:838): user pid=8866 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1198901734.102:839): user pid=8877 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1198901751.152:840): user pid=8885 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1198901753.381:841): user pid=8978 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1198901755.218:842): user pid=8991 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1198901769.434:843): user pid=9002 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_END msg=audit(1198902451.426:844): user pid=7250 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198904461.917:845): user pid=25805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198904461.918:846): user pid=25805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198904461.918:847): login pid=25805 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198904461.950:848): user pid=25805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198904462.059:849): user pid=25805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198904462.059:850): user pid=25805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198908061.073:851): user pid=8481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198908061.074:852): user pid=8481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198908061.074:853): login pid=8481 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198908061.082:854): user pid=8481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198908061.087:855): user pid=8481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198908061.087:856): user pid=8481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198909152.211:857): user pid=12677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198909152.212:858): user pid=12677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198909152.296:859): user pid=12677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198909163.916:860): user pid=12677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198909239.976:861): user pid=12955 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/14 res=success)' >type=USER_ACCT msg=audit(1198909239.976:862): user pid=12955 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/14 res=success)' >type=USER_START msg=audit(1198909239.989:863): user pid=12955 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/14 res=success)' >type=USER_END msg=audit(1198909240.197:864): user pid=12955 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198909259.881:865): user pid=13044 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/14 res=success)' >type=USER_ACCT msg=audit(1198909259.881:866): user pid=13044 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/14 res=success)' >type=USER_START msg=audit(1198909259.889:867): user pid=13044 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/14 res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198909268.212:868): user pid=22223 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198909268.288:869): user pid=22223 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1198909314.514:870): user pid=13044 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198909320.058:871): user pid=13076 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198909320.059:872): user pid=13076 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198909320.066:873): user pid=13076 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198909359.609:874): user pid=13076 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1198909831.353:875): user pid=13104 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/14 res=success)' >type=USER_ACCT msg=audit(1198909831.356:876): user pid=13104 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/14 res=success)' >type=USER_START msg=audit(1198909831.368:877): user pid=13104 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/14 res=success)' >type=CRED_ACQ msg=audit(1198909831.401:878): user pid=13104 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/14 res=success)' >type=CRED_DISP msg=audit(1198909837.868:879): user pid=13104 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/14 res=success)' >type=USER_END msg=audit(1198909837.868:880): user pid=13104 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/14 res=success)' >type=ANOM_ABEND msg=audit(1198910936.826:881): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13155 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1198911661.102:882): user pid=13186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198911661.102:883): user pid=13186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198911661.102:884): login pid=13186 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198911661.109:885): user pid=13186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198911661.114:886): user pid=13186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198911661.114:887): user pid=13186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198915261.128:888): user pid=13318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198915261.128:889): user pid=13318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198915261.129:890): login pid=13318 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198915261.137:891): user pid=13318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198915261.142:892): user pid=13318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198915261.142:893): user pid=13318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198918861.156:894): user pid=13451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198918861.157:895): user pid=13451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198918861.157:896): login pid=13451 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198918861.164:897): user pid=13451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198918861.169:898): user pid=13451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198918861.169:899): user pid=13451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198922461.194:900): user pid=13583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198922461.194:901): user pid=13583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198922461.194:902): login pid=13583 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198922461.204:903): user pid=13583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198922461.209:904): user pid=13583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198922461.210:905): user pid=13583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198922521.217:906): user pid=13588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198922521.217:907): user pid=13588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198922521.217:908): login pid=13588 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198922521.225:909): user pid=13588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198923268.993:910): user pid=13588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198923268.994:911): user pid=13588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198926061.418:912): user pid=16683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198926061.430:913): user pid=16683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198926061.430:914): login pid=16683 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198926061.459:915): user pid=16683 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198926061.502:916): user pid=16683 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198926061.503:917): user pid=16683 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198926493.803:918): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16701 comm="f-spot" sig=6 >type=ANOM_ABEND msg=audit(1198927499.954:919): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16758 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1198929661.589:920): user pid=17013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198929661.590:921): user pid=17013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198929661.590:922): login pid=17013 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198929661.598:923): user pid=17013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198929661.644:924): user pid=17013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198929661.645:925): user pid=17013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198930061.661:926): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17121 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930088.421:927): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17179 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930088.975:928): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17199 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930089.369:929): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17218 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930089.764:930): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17237 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930133.444:931): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17319 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930133.802:932): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17339 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930134.174:933): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17358 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930134.543:934): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17377 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930201.426:935): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17425 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930209.323:936): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17439 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930252.877:937): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17456 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930308.773:938): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17472 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930390.361:939): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17888 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930519.384:940): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17909 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930529.254:941): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17924 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930616.033:942): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17958 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930824.224:943): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17987 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930906.561:944): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18005 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198930995.791:945): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18016 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198931089.010:946): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18023 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198931133.393:947): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18037 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198931316.904:948): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=12717 comm="dbus-launch" sig=6 >type=USER_ACCT msg=audit(1198933262.016:949): user pid=18268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198933262.016:950): user pid=18268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198933262.016:951): login pid=18268 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198933262.024:952): user pid=18268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198933262.107:953): user pid=18268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198933262.108:954): user pid=18268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198936861.318:955): user pid=18666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198936861.346:956): user pid=18666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198936861.346:957): login pid=18666 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198936861.376:958): user pid=18666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198936861.402:959): user pid=18666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198936861.402:960): user pid=18666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198940461.496:961): user pid=18800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198940461.497:962): user pid=18800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198940461.497:963): login pid=18800 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198940461.536:964): user pid=18800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198940461.585:965): user pid=18800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198940461.586:966): user pid=18800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198941820.629:967): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18954 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198942107.493:968): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19025 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198942428.599:969): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19059 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198942519.221:970): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19063 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198942554.242:971): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19066 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1198943186.778:972): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=22833 comm="gs857" sig=11 >type=ANOM_ABEND msg=audit(1198943437.445:973): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28681 comm="gs857" sig=11 >type=USER_ACCT msg=audit(1198944061.990:974): user pid=2164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198944061.991:975): user pid=2164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198944061.991:976): login pid=2164 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198944062.043:977): user pid=2164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198944062.107:978): user pid=2164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198944062.107:979): user pid=2164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198944750.448:980): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2214 comm="gs857" sig=11 >type=ANOM_ABEND msg=audit(1198945157.810:981): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16026 comm="gs861" sig=11 >type=ANOM_ABEND msg=audit(1198945970.498:982): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28893 comm="f-spot" sig=6 >type=ANOM_ABEND msg=audit(1198946552.412:983): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28916 comm="f-spot" sig=6 >type=ANOM_ABEND msg=audit(1198946696.569:984): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2988 comm="gs854" sig=11 >type=ANOM_ABEND msg=audit(1198946735.938:985): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2990 comm="gs857" sig=11 >type=ANOM_ABEND msg=audit(1198946750.933:986): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2992 comm="gs857" sig=11 >type=ANOM_ABEND msg=audit(1198946783.637:987): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2993 comm="gs857" sig=11 >type=ANOM_ABEND msg=audit(1198946795.373:988): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2994 comm="gs861" sig=11 >type=ANOM_ABEND msg=audit(1198946834.220:989): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3000 comm="gs861" sig=11 >type=AVC msg=audit(1198947204.216:990): avc: denied { getattr } for pid=3021 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198947204.216:990): arch=40000003 syscall=195 success=yes exit=0 a0=b8519c48 a1=bf9c1670 a2=5e1ff4 a3=b8519c48 items=0 ppid=2056 pid=3021 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1198947204.262:991): avc: denied { read } for pid=3021 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198947204.262:991): arch=40000003 syscall=5 success=yes exit=4 a0=b8519c48 a1=8000 a2=1b6 a3=b8518db8 items=0 ppid=2056 pid=3021 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1198947204.279:992): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1198947204.280:993): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1198947207.753:994): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198947207.788:995): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198947207.942:996): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1198947207.945:997): login pid=3021 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1198947207.945:998): user pid=3021 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198947207.947:999): user pid=3025 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1198947209.873:1000): user pid=3021 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1198947209.873:1001): user pid=3021 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198947661.349:1002): user pid=3085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198947661.350:1003): user pid=3085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198947661.350:1004): login pid=3085 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198947661.356:1005): user pid=3085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198947661.451:1006): user pid=3085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198947661.452:1007): user pid=3085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198947954.868:1008): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3099 comm="gs861" sig=11 >type=ANOM_ABEND msg=audit(1198948060.059:1009): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3104 comm="gs861" sig=11 >type=ANOM_ABEND msg=audit(1198948214.716:1010): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3112 comm="gs861" sig=11 >type=ANOM_ABEND msg=audit(1198948243.266:1011): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3116 comm="gs861" sig=11 >type=AVC msg=audit(1198949753.254:1012): avc: denied { search } for pid=23596 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1198949753.254:1012): avc: denied { read } for pid=23596 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1198949753.254:1012): arch=40000003 syscall=195 success=yes exit=0 a0=b92ee968 a1=bf804e4c a2=52bff4 a3=8170 items=0 ppid=23587 pid=23596 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198949753.371:1013): avc: denied { read } for pid=23596 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198949753.371:1013): arch=40000003 syscall=5 success=yes exit=17 a0=b92eecf0 a1=8000 a2=1b6 a3=8000 items=0 ppid=23587 pid=23596 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198949753.395:1014): avc: denied { getattr } for pid=23596 comm="httpd" path="/home/rick/public_html/.htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198949753.395:1014): arch=40000003 syscall=197 success=yes exit=0 a0=11 a1=bf804d1c a2=52bff4 a3=b92eed18 items=0 ppid=23587 pid=23596 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198949753.480:1015): avc: denied { getattr } for pid=23597 comm="httpd" path="/home/rick/public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1198949753.480:1015): arch=40000003 syscall=196 success=yes exit=0 a0=b92f62d0 a1=bf804d4c a2=52bff4 a3=2008171 items=0 ppid=23587 pid=23597 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198949753.480:1016): avc: denied { getattr } for pid=23597 comm="httpd" path="/home/rick/public_html/photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1198949753.480:1016): arch=40000003 syscall=196 success=yes exit=0 a0=b92f62d0 a1=bf804d4c a2=52bff4 a3=2008171 items=0 ppid=23587 pid=23597 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198949753.508:1017): avc: denied { read } for pid=23597 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1198949753.508:1017): arch=40000003 syscall=5 success=yes exit=17 a0=b92ee9e8 a1=98800 a2=bf802d58 a3=64 items=0 ppid=23587 pid=23597 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1198949764.987:1018): avc: denied { getattr } for pid=23593 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1198949764.987:1018): arch=40000003 syscall=196 success=yes exit=0 a0=bf801da8 a1=bf801cfc a2=52bff4 a3=171 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1198951261.787:1019): user pid=3336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198951261.799:1020): user pid=3336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198951261.799:1021): login pid=3336 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198951261.832:1022): user pid=3336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198951261.935:1023): user pid=3336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198951261.935:1024): user pid=3336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198954862.038:1025): user pid=3468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198954862.038:1026): user pid=3468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198954862.039:1027): login pid=3468 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198954862.044:1028): user pid=3468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198954862.140:1029): user pid=3468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198954862.140:1030): user pid=3468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198956073.181:1031): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17906 comm="gs861" sig=11 >type=ANOM_ABEND msg=audit(1198956079.965:1032): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17907 comm="gs.cur" sig=11 >type=USER_ACCT msg=audit(1198958461.628:1033): user pid=18210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198958461.628:1034): user pid=18210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198958461.628:1035): login pid=18210 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198958461.634:1036): user pid=18210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198958461.720:1037): user pid=18210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198958461.720:1038): user pid=18210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198962061.890:1039): user pid=18477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198962061.891:1040): user pid=18477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198962061.891:1041): login pid=18477 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198962061.906:1042): user pid=18477 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198962061.928:1043): user pid=18477 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198962061.928:1044): user pid=18477 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198963119.475:1045): user pid=18677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1198963119.475:1046): user pid=18677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198963119.605:1047): user pid=18677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1198963195.746:1048): user pid=18677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1198963214.159:1049): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18746 comm="rarian-sk-get-c" sig=11 >type=USER_ACCT msg=audit(1198965661.378:1050): user pid=19508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198965661.379:1051): user pid=19508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198965661.379:1052): login pid=19508 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198965661.411:1053): user pid=19508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198965661.441:1054): user pid=19508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198965661.441:1055): user pid=19508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1198967334.707:1056): user pid=19577 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1198968895.576:1057): avc: denied { getattr } for pid=19698 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198968895.576:1057): arch=40000003 syscall=195 success=yes exit=0 a0=b9719c48 a1=bfef0b90 a2=5e1ff4 a3=b9719c48 items=0 ppid=2056 pid=19698 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1198968895.576:1058): avc: denied { read } for pid=19698 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1198968895.576:1058): arch=40000003 syscall=5 success=yes exit=4 a0=b9719c48 a1=8000 a2=1b6 a3=b9718db8 items=0 ppid=2056 pid=19698 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1198968895.594:1059): user pid=19698 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1198968895.596:1060): user pid=19698 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1198968899.246:1061): user pid=19698 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198968899.269:1062): user pid=19698 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1198968899.349:1063): user pid=19698 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1198968899.352:1064): login pid=19698 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1198968899.352:1065): user pid=19698 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1198968899.354:1066): user pid=19702 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1198969262.267:1067): user pid=19805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198969262.269:1068): user pid=19805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198969262.269:1069): login pid=19805 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198969262.325:1070): user pid=19805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198969262.603:1071): user pid=19805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198969262.603:1072): user pid=19805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198969654.311:1073): user pid=19698 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1198969654.371:1074): user pid=19698 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=ANOM_ABEND msg=audit(1198969940.194:1075): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19868 comm="vmware" sig=6 >type=ANOM_ABEND msg=audit(1198969947.483:1076): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19901 comm="vmware" sig=6 >type=ANOM_ABEND msg=audit(1198969984.656:1077): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19935 comm="vmware" sig=6 >type=ANOM_ABEND msg=audit(1198969995.888:1078): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20009 comm="vmware" sig=6 >type=ANOM_ABEND msg=audit(1198970267.865:1079): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20057 comm="vmware" sig=6 >type=ANOM_ABEND msg=audit(1198970298.079:1080): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20090 comm="vmware" sig=6 >type=USER_END msg=audit(1198970367.174:1081): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1198970367.207:1082): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_END msg=audit(1198970372.648:1083): user pid=14547 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1198970373.903:1084): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20389 comm="firefox-bin" sig=11 >type=DAEMON_END msg=audit(1198970413.230:8918): auditd normal halt, sending auid=4294967295 pid=20707 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1797 >type=DAEMON_START msg=audit(1198970564.728:8977): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1943 res=success, auditd pid=1943 >type=CONFIG_CHANGE msg=audit(1198970564.827:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1198970564.827:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1198970564.860:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1198970564.860:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=LABEL_LEVEL_CHANGE msg=audit(1198970586.370:8): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1198970586.594:9): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1198970604.780:10): user pid=3000 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1198970604.788:11): user pid=3000 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1198970604.789:12): user pid=3000 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1198970604.806:13): login pid=3000 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1198970604.831:14): user pid=3000 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1198970604.880:15): user pid=3000 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1198970604.882:16): user pid=3000 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1198970825.382:17): dev=eth0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1198970825.382:17): arch=40000003 syscall=5 per=400000 success=yes exit=175 a0=bfa794d2 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=4266 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1198971670.432:18): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4595 comm="nautilus" sig=11 >type=ANOM_ABEND msg=audit(1198971670.432:19): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4598 comm="nautilus" sig=11 >type=USER_ACCT msg=audit(1198972861.618:20): user pid=5004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198972861.637:21): user pid=5004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198972861.637:22): login pid=5004 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198972861.741:23): user pid=5004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198972861.919:24): user pid=5004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198972861.919:25): user pid=5004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1198974377.973:26): dev=eth0 prom=0 old_prom=256 auid=500 >type=SYSCALL msg=audit(1198974377.973:26): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=af a1=0 a2=bfa79abc a3=8908dc8 items=0 ppid=1 pid=4266 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_ACCT msg=audit(1198976180.423:27): user pid=6037 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198976461.564:28): user pid=6121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198976461.564:29): user pid=6121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198976461.565:30): login pid=6121 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198976461.622:31): user pid=6121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198976461.677:32): user pid=6121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198976461.678:33): user pid=6121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1198977520.452:34): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6426 comm="nautilus" sig=6 >type=USER_ACCT msg=audit(1198980062.338:35): user pid=7168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198980062.365:36): user pid=7168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198980062.365:37): login pid=7168 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198980062.442:38): user pid=7168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198980062.647:39): user pid=7168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198980062.648:40): user pid=7168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198983662.641:41): user pid=8142 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198983662.674:42): user pid=8142 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198983662.674:43): login pid=8142 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198983662.745:44): user pid=8142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198983662.966:45): user pid=8142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198983662.967:46): user pid=8142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198987261.988:47): user pid=9117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198987262.015:48): user pid=9117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198987262.015:49): login pid=9117 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198987262.092:50): user pid=9117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198987262.272:51): user pid=9117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198987262.272:52): user pid=9117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198990861.665:53): user pid=10094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198990861.691:54): user pid=10094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198990861.692:55): login pid=10094 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198990861.768:56): user pid=10094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198990861.982:57): user pid=10094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198990861.982:58): user pid=10094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198994461.608:59): user pid=11065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198994461.659:60): user pid=11065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198994461.659:61): login pid=11065 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198994461.694:62): user pid=11065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198994461.866:63): user pid=11065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198994461.866:64): user pid=11065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1198998062.539:65): user pid=11932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1198998062.565:66): user pid=11932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1198998062.566:67): login pid=11932 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1198998062.663:68): user pid=11932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1198998062.847:69): user pid=11932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1198998062.847:70): user pid=11932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199001662.444:71): user pid=12910 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199001662.495:72): user pid=12910 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199001662.496:73): login pid=12910 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199001662.531:74): user pid=12910 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199001662.702:75): user pid=12910 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199001662.703:76): user pid=12910 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199005228.432:77): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=HP_LaserJet_1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1199005246.593:78): user pid=13964 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199005246.593:79): user pid=13964 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199005246.749:80): user pid=13964 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199005261.918:81): user pid=13991 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199005261.919:82): user pid=13991 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199005261.920:83): login pid=13991 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199005261.928:84): user pid=13991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199005262.027:85): user pid=13991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199005262.027:86): user pid=13991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199005382.756:87): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=HP_LaserJet_1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1199005447.764:88): user pid=13964 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1199005454.682:89): user pid=14074 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199005454.682:90): user pid=14074 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199005454.692:91): user pid=14074 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AVC msg=audit(1199005480.399:92): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.bluez.Manager member=DefaultAdapter dest=org.bluez spid=14140 tpid=2312 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1199005480.483:93): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=error error_name=org.bluez.Error.NoSuchAdapter dest=:1.49 spid=2312 tpid=14140 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=LABEL_LEVEL_CHANGE msg=audit(1199005650.294:94): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199005650.326:95): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199005650.330:96): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1199005747.924:97): user pid=14074 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1199006817.942:98): avc: denied { execmod } for pid=14632 comm="npviewer.bin" path="/usr/lib/mozilla/plugins/nppdf.so" dev=dm-0 ino=48892366 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1199006817.942:98): arch=40000003 syscall=125 success=yes exit=0 a0=7dd000 a1=108000 a2=5 a3=bff45da0 items=0 ppid=4335 pid=14632 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_ACCT msg=audit(1199008861.487:99): user pid=15302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199008861.515:100): user pid=15302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199008861.515:101): login pid=15302 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199008861.561:102): user pid=15302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199008861.722:103): user pid=15302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199008861.722:104): user pid=15302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199008921.729:105): user pid=15323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199008921.730:106): user pid=15323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199008921.730:107): login pid=15323 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199008921.737:108): user pid=15323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199009523.439:109): user pid=15323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199009523.440:110): user pid=15323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199010121.698:111): user pid=16641 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199010121.699:112): user pid=16641 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199010121.699:113): login pid=16641 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199010121.739:114): user pid=16641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199010283.110:115): user pid=16733 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199010909.469:116): user pid=16641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199010909.510:117): user pid=16641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199012462.298:118): user pid=22036 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199012462.323:119): user pid=22036 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199012462.323:120): login pid=22036 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199012462.424:121): user pid=22036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199012463.292:122): user pid=22036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199012463.292:123): user pid=22036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199016071.512:124): user pid=22735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199016072.877:125): user pid=22735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199016074.131:126): login pid=22735 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199016080.674:127): user pid=22735 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199016102.822:128): user pid=22735 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199016103.813:129): user pid=22735 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=DAEMON_START msg=audit(1199016864.336:763): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2018 res=success, auditd pid=2018 >type=CONFIG_CHANGE msg=audit(1199016864.436:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199016864.436:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1199016864.461:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199016864.461:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=LABEL_LEVEL_CHANGE msg=audit(1199016880.315:8): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199016880.557:9): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199016880.601:10): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1199017119.334:11): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1199017119.342:12): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1199017119.343:13): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1199017119.360:14): login pid=3099 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1199017119.384:15): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199017119.434:16): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1199017119.436:17): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1199018530.304:18): user pid=4684 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199019662.016:19): user pid=5368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199019662.017:20): user pid=5368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199019662.017:21): login pid=5368 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199019662.045:22): user pid=5368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199019662.076:23): user pid=5368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199019662.076:24): user pid=5368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199020366.259:25): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5604 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199020501.086:26): user pid=5654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199020501.086:27): user pid=5654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199020501.086:28): login pid=5654 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199020501.091:29): user pid=5654 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199023261.662:30): user pid=6421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199023261.662:31): user pid=6421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199023261.662:32): login pid=6421 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199023261.708:33): user pid=6421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199023261.793:34): user pid=6421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199023261.793:35): user pid=6421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199026861.862:36): user pid=7400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199026861.863:37): user pid=7400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199026861.863:38): login pid=7400 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199026861.870:39): user pid=7400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199026861.875:40): user pid=7400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199026861.875:41): user pid=7400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199030461.890:42): user pid=8493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199030461.890:43): user pid=8493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199030461.891:44): login pid=8493 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199030461.898:45): user pid=8493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199030461.904:46): user pid=8493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199030461.904:47): user pid=8493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199034061.920:48): user pid=9482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199034061.920:49): user pid=9482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199034061.920:50): login pid=9482 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199034061.927:51): user pid=9482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199034061.931:52): user pid=9482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199034061.931:53): user pid=9482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199035288.430:54): avc: denied { search } for pid=2667 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1199035288.430:54): avc: denied { read } for pid=2667 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=AVC msg=audit(1199035288.430:54): avc: denied { getattr } for pid=2667 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199035288.430:54): arch=40000003 syscall=195 success=yes exit=0 a0=b8609430 a1=bfcfa44c a2=52bff4 a3=8170 items=0 ppid=2568 pid=2667 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199035288.509:55): avc: denied { read } for pid=2667 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199035288.509:55): arch=40000003 syscall=5 success=yes exit=17 a0=b86097d0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2568 pid=2667 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199037077.478:56): avc: denied { execmod } for pid=10346 comm="npviewer.bin" path="/usr/lib/mozilla/plugins/nppdf.so" dev=dm-0 ino=48892366 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1199037077.478:56): arch=40000003 syscall=125 success=yes exit=0 a0=7dd000 a1=108000 a2=5 a3=bfc091f0 items=0 ppid=4241 pid=10346 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_ACCT msg=audit(1199037661.982:57): user pid=10684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199037661.983:58): user pid=10684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199037661.983:59): login pid=10684 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199037661.989:60): user pid=10684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199037662.035:61): user pid=10684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199037662.035:62): user pid=10684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199038595.808:63): avc: denied { read } for pid=2671 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1199038595.808:63): arch=40000003 syscall=195 success=yes exit=0 a0=b860b4e8 a1=bfcfa44c a2=52bff4 a3=8170 items=0 ppid=2568 pid=2671 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199038896.127:64): avc: denied { search } for pid=2672 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1199038896.127:64): arch=40000003 syscall=195 success=yes exit=0 a0=b860b4e8 a1=bfcfa44c a2=52bff4 a3=8170 items=0 ppid=2568 pid=2672 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1199041107.754:65): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=11753 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199041261.380:66): user pid=11797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199041261.380:67): user pid=11797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199041261.381:68): login pid=11797 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199041261.387:69): user pid=11797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199041261.463:70): user pid=11797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199041261.463:71): user pid=11797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199041298.007:72): avc: denied { getattr } for pid=2672 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199041298.007:72): arch=40000003 syscall=195 success=yes exit=0 a0=b860d4f0 a1=bfcfa44c a2=52bff4 a3=8170 items=0 ppid=2568 pid=2672 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199041298.007:73): avc: denied { read } for pid=2672 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199041298.007:73): arch=40000003 syscall=5 success=yes exit=17 a0=b860d890 a1=8000 a2=1b6 a3=8000 items=0 ppid=2568 pid=2672 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1199042407.427:74): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=12111 comm="f-spot" sig=6 >type=USER_AUTH msg=audit(1199042819.042:75): user pid=25120 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199042819.042:76): user pid=25120 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199042819.314:77): user pid=25120 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1199042849.866:78): user pid=25120 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1199043145.552:79): avc: denied { search } for pid=2670 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1199043145.552:79): avc: denied { read } for pid=2670 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=AVC msg=audit(1199043145.552:79): avc: denied { getattr } for pid=2670 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199043145.552:79): arch=40000003 syscall=195 success=yes exit=0 a0=b86094e0 a1=bfcfa44c a2=52bff4 a3=8170 items=0 ppid=2568 pid=2670 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199043145.552:80): avc: denied { read } for pid=2670 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199043145.552:80): arch=40000003 syscall=5 success=yes exit=17 a0=b8609880 a1=8000 a2=1b6 a3=8000 items=0 ppid=2568 pid=2670 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1199044861.508:81): user pid=26903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199044861.509:82): user pid=26903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199044861.509:83): login pid=26903 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199044861.516:84): user pid=26903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199044861.521:85): user pid=26903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199044861.522:86): user pid=26903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199045464.685:87): avc: denied { getattr } for pid=27265 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199045464.685:87): arch=40000003 syscall=195 success=yes exit=0 a0=b8b19c38 a1=bf940de0 a2=5e1ff4 a3=b8b19c38 items=0 ppid=2502 pid=27265 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199045464.705:88): avc: denied { read } for pid=27265 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199045464.705:88): arch=40000003 syscall=5 success=yes exit=4 a0=b8b19c38 a1=8000 a2=1b6 a3=b8b18da8 items=0 ppid=2502 pid=27265 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1199045464.731:89): user pid=27265 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1199045464.810:90): user pid=27265 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=LOGIN msg=audit(1199045464.812:91): login pid=27265 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199045464.812:92): user pid=27265 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1199045464.814:93): user pid=27268 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1199045464.978:94): user pid=27265 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=USER_END msg=audit(1199045464.979:95): user pid=27265 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=AVC msg=audit(1199048396.704:96): avc: denied { read } for pid=31680 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199048396.704:96): arch=40000003 syscall=5 success=yes exit=3 a0=8372bf8 a1=8000 a2=0 a3=8000 items=0 ppid=2671 pid=31680 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1199048396.742:97): avc: denied { ioctl } for pid=31680 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199048396.742:97): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bfadd0c8 a3=bfadd108 items=0 ppid=2671 pid=31680 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1199048396.742:98): avc: denied { getattr } for pid=31680 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199048396.742:98): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=8356068 a2=776ff4 a3=836c808 items=0 ppid=2671 pid=31680 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=USER_ACCT msg=audit(1199048461.566:99): user pid=31697 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199048461.567:100): user pid=31697 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199048461.567:101): login pid=31697 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199048461.574:102): user pid=31697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199048461.592:103): user pid=31697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199048461.592:104): user pid=31697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199048636.006:105): avc: denied { read } for pid=31752 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199048636.006:105): arch=40000003 syscall=5 success=yes exit=3 a0=937bbf8 a1=8000 a2=0 a3=8000 items=0 ppid=2673 pid=31752 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1199048636.006:106): avc: denied { ioctl } for pid=31752 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199048636.006:106): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bfc2e188 a3=bfc2e1c8 items=0 ppid=2673 pid=31752 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1199048636.006:107): avc: denied { getattr } for pid=31752 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199048636.006:107): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=935f068 a2=776ff4 a3=9375808 items=0 ppid=2673 pid=31752 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1199049292.345:108): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=31952 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199052061.672:109): user pid=32708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199052061.673:110): user pid=32708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199052061.673:111): login pid=32708 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199052061.687:112): user pid=32708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199052061.722:113): user pid=32708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199052061.722:114): user pid=32708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199055661.736:115): user pid=1257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199055661.736:116): user pid=1257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199055661.737:117): login pid=1257 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199055661.746:118): user pid=1257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199055661.750:119): user pid=1257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199055661.750:120): user pid=1257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199056198.610:121): user pid=1444 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199056198.610:122): user pid=1444 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199056198.718:123): user pid=1444 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AVC msg=audit(1199056206.057:124): user pid=2196 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.bluez.Manager member=DefaultAdapter dest=org.bluez spid=1521 tpid=2468 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1199056206.123:125): user pid=2196 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=error error_name=org.bluez.Error.NoSuchAdapter dest=:1.46 spid=2468 tpid=1521 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=LABEL_LEVEL_CHANGE msg=audit(1199056579.719:126): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199056579.723:127): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199056579.759:128): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1199056673.868:129): avc: denied { getattr } for pid=1664 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199056673.868:129): arch=40000003 syscall=229 success=yes exit=33 a0=41103578 a1=402a6723 a2=41105ba0 a3=ff items=0 ppid=1 pid=1664 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1199056673.869:130): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199056673.883:131): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199056673.887:132): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1199056752.248:133): avc: denied { write } for pid=1664 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199056752.248:133): arch=40000003 syscall=5 success=yes exit=19 a0=41102f6d a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=1664 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199056752.276:134): avc: denied { ioctl } for pid=1767 comm="foomatic-rip" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199056752.276:134): arch=40000003 syscall=54 success=no exit=-25 a0=1 a1=5401 a2=bfb0c908 a3=bfb0c948 items=0 ppid=1664 pid=1767 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1199059261.765:135): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199059261.766:136): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199059261.767:137): login pid=2683 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199059261.776:138): user pid=2683 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199059261.781:139): user pid=2683 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199059261.782:140): user pid=2683 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199062861.808:141): user pid=3750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199062861.808:142): user pid=3750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199062861.808:143): login pid=3750 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199062861.816:144): user pid=3750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199062861.822:145): user pid=3750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199062861.822:146): user pid=3750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199066461.835:147): user pid=4766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199066461.836:148): user pid=4766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199066461.836:149): login pid=4766 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199066461.843:150): user pid=4766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199066461.848:151): user pid=4766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199066461.848:152): user pid=4766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199070061.862:153): user pid=5925 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199070061.862:154): user pid=5925 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199070061.862:155): login pid=5925 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199070061.868:156): user pid=5925 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199070061.872:157): user pid=5925 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199070061.872:158): user pid=5925 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199073661.921:159): user pid=6888 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199073661.921:160): user pid=6888 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199073661.921:161): login pid=6888 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199073661.928:162): user pid=6888 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199073661.933:163): user pid=6888 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199073661.933:164): user pid=6888 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199075123.769:165): user pid=1444 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1199076963.603:166): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8187 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199077262.226:167): user pid=8270 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199077262.226:168): user pid=8270 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199077262.227:169): login pid=8270 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199077262.234:170): user pid=8270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199077262.289:171): user pid=8270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199077262.290:172): user pid=8270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199078380.446:173): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8596 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199080861.303:174): user pid=9258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199080861.304:175): user pid=9258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199080861.304:176): login pid=9258 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199080861.310:177): user pid=9258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199080861.314:178): user pid=9258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199080861.314:179): user pid=9258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199084461.327:180): user pid=10228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199084461.327:181): user pid=10228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199084461.327:182): login pid=10228 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199084461.333:183): user pid=10228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199084461.337:184): user pid=10228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199084461.338:185): user pid=10228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199084987.499:186): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=10374 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199088061.350:187): user pid=11235 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199088061.350:188): user pid=11235 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199088061.351:189): login pid=11235 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199088061.357:190): user pid=11235 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199088061.362:191): user pid=11235 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199088061.362:192): user pid=11235 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199091661.374:193): user pid=12225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199091661.375:194): user pid=12225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199091661.375:195): login pid=12225 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199091661.383:196): user pid=12225 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199091661.388:197): user pid=12225 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199091661.388:198): user pid=12225 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199095261.425:199): user pid=13213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199095261.425:200): user pid=13213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199095261.425:201): login pid=13213 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199095261.432:202): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199095261.436:203): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199095261.437:204): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199095321.443:205): user pid=13230 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199095321.443:206): user pid=13230 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199095321.443:207): login pid=13230 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199095321.452:208): user pid=13230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199095868.693:209): user pid=13230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199095868.693:210): user pid=13230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199098861.939:211): user pid=16560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199098861.940:212): user pid=16560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199098861.940:213): login pid=16560 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199098861.980:214): user pid=16560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199098862.064:215): user pid=16560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199098862.064:216): user pid=16560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199102461.158:217): user pid=17719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199102461.159:218): user pid=17719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199102461.159:219): login pid=17719 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199102461.166:220): user pid=17719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199102461.226:221): user pid=17719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199102461.227:222): user pid=17719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199104454.059:223): user pid=18293 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104521.355:224): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104521.508:225): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104521.513:226): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.169:227): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.173:228): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.177:229): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.184:230): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.190:231): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.194:232): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.198:233): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.203:234): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.207:235): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.211:236): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.215:237): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.220:238): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.225:239): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.229:240): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.233:241): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.238:242): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104533.242:243): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199104572.942:244): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1199105804.076:245): user pid=18817 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199105804.076:246): user pid=18817 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199105804.169:247): user pid=18817 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1199105998.408:248): user pid=18817 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1199106020.204:249): avc: denied { execmod } for pid=18895 comm="npviewer.bin" path="/usr/lib/mozilla/plugins/nppdf.so" dev=dm-0 ino=48892366 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1199106020.204:249): arch=40000003 syscall=125 success=yes exit=0 a0=7dd000 a1=108000 a2=5 a3=bfb50930 items=0 ppid=4241 pid=18895 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_ACCT msg=audit(1199106061.311:250): user pid=18969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199106061.311:251): user pid=18969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199106061.312:252): login pid=18969 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199106061.319:253): user pid=18969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199106061.371:254): user pid=18969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199106061.372:255): user pid=18969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199106901.851:256): user pid=19290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199106901.852:257): user pid=19290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199106901.852:258): login pid=19290 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199106901.921:259): user pid=19290 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199109661.686:260): user pid=20053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199109661.713:261): user pid=20053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199109661.714:262): login pid=20053 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199109661.790:263): user pid=20053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199109661.989:264): user pid=20053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199109661.990:265): user pid=20053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199113262.002:266): user pid=21035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199113262.003:267): user pid=21035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199113262.003:268): login pid=21035 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199113262.011:269): user pid=21035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199113262.016:270): user pid=21035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199113262.017:271): user pid=21035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199113743.708:272): avc: denied { execmod } for pid=21325 comm="npviewer.bin" path="/usr/lib/mozilla/plugins/nppdf.so" dev=dm-0 ino=48892366 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1199113743.708:272): arch=40000003 syscall=125 success=yes exit=0 a0=7dd000 a1=108000 a2=5 a3=bfbdb1c0 items=0 ppid=4241 pid=21325 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=MAC_POLICY_LOAD msg=audit(1199113871.413:273): policy loaded auid=500 >type=SYSCALL msg=audit(1199113871.413:273): arch=40000003 syscall=4 success=yes exit=3990099 a0=4 a1=b7b3d000 a2=3ce253 a3=bfed0bc8 items=0 ppid=21424 pid=21428 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=pts16 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_AVC msg=audit(1199113871.647:274): user pid=2196 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_ACCT msg=audit(1199116861.031:275): user pid=22474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199116861.032:276): user pid=22474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199116861.032:277): login pid=22474 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199116861.041:278): user pid=22474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199116861.047:279): user pid=22474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199116861.048:280): user pid=22474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199120461.063:281): user pid=23710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199120461.064:282): user pid=23710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199120461.064:283): login pid=23710 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199120461.071:284): user pid=23710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199120461.075:285): user pid=23710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199120461.076:286): user pid=23710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199124061.089:287): user pid=24745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199124061.090:288): user pid=24745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199124061.090:289): login pid=24745 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199124061.097:290): user pid=24745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199124061.102:291): user pid=24745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199124061.102:292): user pid=24745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199127661.115:293): user pid=25790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199127661.116:294): user pid=25790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199127661.116:295): login pid=25790 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199127661.124:296): user pid=25790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199127661.128:297): user pid=25790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199127661.128:298): user pid=25790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199131261.162:299): user pid=26921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199131261.163:300): user pid=26921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199131261.163:301): login pid=26921 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199131261.168:302): user pid=26921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199131261.186:303): user pid=26921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199131261.187:304): user pid=26921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199134861.212:305): user pid=28215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199134861.213:306): user pid=28215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199134861.213:307): login pid=28215 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199134861.221:308): user pid=28215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199134861.226:309): user pid=28215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199134861.226:310): user pid=28215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199138461.239:311): user pid=29221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199138461.240:312): user pid=29221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199138461.240:313): login pid=29221 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199138461.248:314): user pid=29221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199138461.253:315): user pid=29221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199138461.253:316): user pid=29221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199140008.259:317): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=29739 comm="monitor" sig=11 >type=USER_ACCT msg=audit(1199142061.347:318): user pid=30380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199142061.347:319): user pid=30380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199142061.348:320): login pid=30380 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199142061.356:321): user pid=30380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199142061.362:322): user pid=30380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199142061.362:323): user pid=30380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199145661.424:324): user pid=31369 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199145661.425:325): user pid=31369 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199145661.425:326): login pid=31369 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199145661.432:327): user pid=31369 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199145661.437:328): user pid=31369 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199145661.438:329): user pid=31369 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199149261.451:330): user pid=32386 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199149261.451:331): user pid=32386 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199149261.452:332): login pid=32386 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199149261.459:333): user pid=32386 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199149261.464:334): user pid=32386 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199149261.464:335): user pid=32386 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199152861.477:336): user pid=909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199152861.478:337): user pid=909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199152861.478:338): login pid=909 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199152861.484:339): user pid=909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199152861.489:340): user pid=909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199152861.489:341): user pid=909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199156461.503:342): user pid=2044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199156461.504:343): user pid=2044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199156461.504:344): login pid=2044 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199156461.512:345): user pid=2044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199156461.518:346): user pid=2044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199156461.518:347): user pid=2044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199160061.551:348): user pid=3163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199160061.552:349): user pid=3163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199160061.552:350): login pid=3163 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199160061.560:351): user pid=3163 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199160061.565:352): user pid=3163 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199160061.566:353): user pid=3163 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199163661.579:354): user pid=4203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199163661.579:355): user pid=4203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199163661.579:356): login pid=4203 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199163661.587:357): user pid=4203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199163661.591:358): user pid=4203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199163661.591:359): user pid=4203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199164881.769:360): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4542 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199167261.604:361): user pid=5223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199167261.604:362): user pid=5223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199167261.605:363): login pid=5223 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199167261.611:364): user pid=5223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199167261.615:365): user pid=5223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199167261.615:366): user pid=5223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199168401.624:367): user pid=5533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199168401.624:368): user pid=5533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199168401.625:369): login pid=5533 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199168401.630:370): user pid=5533 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199170861.761:371): user pid=6245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199170861.761:372): user pid=6245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199170861.762:373): login pid=6245 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199170861.768:374): user pid=6245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199170861.772:375): user pid=6245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199170861.773:376): user pid=6245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199172001.781:377): user pid=6558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199172001.782:378): user pid=6558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199172001.782:379): login pid=6558 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199172001.790:380): user pid=6558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199174461.786:381): user pid=7233 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199174461.787:382): user pid=7233 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199174461.787:383): login pid=7233 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199174461.792:384): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199174461.796:385): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199174461.796:386): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199178061.811:387): user pid=8351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199178061.812:388): user pid=8351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199178061.812:389): login pid=8351 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199178061.818:390): user pid=8351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199178061.823:391): user pid=8351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199178061.824:392): user pid=8351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199181114.888:393): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9348 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199181661.838:394): user pid=9633 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199181661.838:395): user pid=9633 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199181661.839:396): login pid=9633 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199181661.847:397): user pid=9633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199181661.851:398): user pid=9633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199181661.851:399): user pid=9633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199181721.857:400): user pid=9740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199181721.857:401): user pid=9740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199181721.857:402): login pid=9740 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199181721.863:403): user pid=9740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199182225.615:404): user pid=9740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199182225.616:405): user pid=9740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199184121.706:406): user pid=11651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199184121.707:407): user pid=11651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199184121.707:408): login pid=11651 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199184121.711:409): user pid=11651 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199184556.856:410): user pid=11651 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199184556.857:411): user pid=11651 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199185007.894:412): user pid=6558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199185007.895:413): user pid=6558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199185261.902:414): user pid=11983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199185261.902:415): user pid=11983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199185261.902:416): login pid=11983 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199185261.909:417): user pid=11983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199185261.914:418): user pid=11983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199185261.914:419): user pid=11983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199188861.927:420): user pid=12967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199188861.928:421): user pid=12967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199188861.928:422): login pid=12967 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199188861.935:423): user pid=12967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199188861.940:424): user pid=12967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199188861.940:425): user pid=12967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199192461.953:426): user pid=13942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199192461.953:427): user pid=13942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199192461.953:428): login pid=13942 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199192461.963:429): user pid=13942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199192461.968:430): user pid=13942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199192461.968:431): user pid=13942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199193301.977:432): user pid=14184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199193301.978:433): user pid=14184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199193301.978:434): login pid=14184 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199193301.986:435): user pid=14184 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199196062.058:436): user pid=14969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199196062.058:437): user pid=14969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199196062.058:438): login pid=14969 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199196062.086:439): user pid=14969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199196062.187:440): user pid=14969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199196062.187:441): user pid=14969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199199661.295:442): user pid=16063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199199661.296:443): user pid=16063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199199661.296:444): login pid=16063 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199199661.317:445): user pid=16063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199199661.340:446): user pid=16063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199199661.341:447): user pid=16063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199200883.070:448): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16436 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199200902.828:449): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16455 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199201112.240:450): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16567 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199201150.487:451): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16598 comm="gs" sig=11 >type=USER_ACCT msg=audit(1199203261.354:452): user pid=17221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199203261.354:453): user pid=17221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199203261.355:454): login pid=17221 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199203261.364:455): user pid=17221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199203261.369:456): user pid=17221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199203261.369:457): user pid=17221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199204725.847:458): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17652 comm="f-spot" sig=6 >type=ANOM_ABEND msg=audit(1199204921.178:459): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17735 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199205076.636:460): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17801 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199205082.475:461): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17823 comm="gs" sig=11 >type=USER_AUTH msg=audit(1199205179.918:462): user pid=17865 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_ACCT msg=audit(1199205179.921:463): user pid=17865 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_START msg=audit(1199205180.087:464): user pid=17865 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=CRED_ACQ msg=audit(1199205180.120:465): user pid=17865 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=ANOM_ABEND msg=audit(1199205329.439:466): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17992 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199205349.600:467): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18021 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199205758.716:468): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18216 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199205820.253:469): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18260 comm="gs" sig=11 >type=USER_ACCT msg=audit(1199206861.382:470): user pid=18558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199206861.383:471): user pid=18558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199206861.383:472): login pid=18558 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199206861.391:473): user pid=18558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199206861.395:474): user pid=18558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199206861.395:475): user pid=18558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199210461.489:476): user pid=19687 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199210461.491:477): user pid=19687 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199210461.491:478): login pid=19687 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199210461.498:479): user pid=19687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199210461.530:480): user pid=19687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199210461.530:481): user pid=19687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199214061.543:482): user pid=20783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199214061.543:483): user pid=20783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199214061.544:484): login pid=20783 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199214061.553:485): user pid=20783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199214061.557:486): user pid=20783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199214061.557:487): user pid=20783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199217661.570:488): user pid=21776 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199217661.570:489): user pid=21776 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199217661.570:490): login pid=21776 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199217661.578:491): user pid=21776 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199217661.595:492): user pid=21776 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199217661.596:493): user pid=21776 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199221261.608:494): user pid=22748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199221261.609:495): user pid=22748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199221261.609:496): login pid=22748 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199221261.614:497): user pid=22748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199221261.618:498): user pid=22748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199221261.619:499): user pid=22748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199222923.798:500): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=23354 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199224861.633:501): user pid=23937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199224861.633:502): user pid=23937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199224861.634:503): login pid=23937 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199224861.641:504): user pid=23937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199224861.646:505): user pid=23937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199224861.647:506): user pid=23937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199226469.550:507): user pid=24452 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ACCT msg=audit(1199228461.662:508): user pid=25062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199228461.663:509): user pid=25062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199228461.663:510): login pid=25062 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199228461.671:511): user pid=25062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199228461.676:512): user pid=25062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199228461.676:513): user pid=25062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199229006.231:514): user pid=25253 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199229006.231:515): user pid=25253 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199229006.270:516): user pid=25253 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1199229039.745:517): user pid=25253 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199232061.690:518): user pid=26184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199232061.691:519): user pid=26184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199232061.691:520): login pid=26184 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199232061.700:521): user pid=26184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199232061.705:522): user pid=26184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199232061.705:523): user pid=26184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199235661.719:524): user pid=27219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199235661.720:525): user pid=27219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199235661.720:526): login pid=27219 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199235661.726:527): user pid=27219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199235661.730:528): user pid=27219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199235661.730:529): user pid=27219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199239261.744:530): user pid=28272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199239261.745:531): user pid=28272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199239261.745:532): login pid=28272 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199239261.753:533): user pid=28272 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199239261.759:534): user pid=28272 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199239261.759:535): user pid=28272 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199242861.772:536): user pid=29266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199242861.773:537): user pid=29266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199242861.773:538): login pid=29266 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199242861.781:539): user pid=29266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199242861.786:540): user pid=29266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199242861.786:541): user pid=29266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199246461.800:542): user pid=30239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199246461.801:543): user pid=30239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199246461.801:544): login pid=30239 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199246461.810:545): user pid=30239 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199246461.815:546): user pid=30239 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199246461.815:547): user pid=30239 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199250061.829:548): user pid=31767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199250061.830:549): user pid=31767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199250061.830:550): login pid=31767 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199250061.838:551): user pid=31767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199250061.843:552): user pid=31767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199250061.843:553): user pid=31767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199251716.708:554): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=1457 comm="dbus-launch" sig=6 >type=CRED_DISP msg=audit(1199251773.911:555): user pid=17865 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_END msg=audit(1199251774.090:556): user pid=17865 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_END msg=audit(1199251776.059:557): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1199251776.076:558): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1199251836.012:559): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1199251836.018:560): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1199251836.018:561): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1199251836.019:562): login pid=3099 uid=0 old auid=500 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1199251836.083:563): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199251836.145:564): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1199251836.146:565): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1199253661.932:566): user pid=1685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199253661.933:567): user pid=1685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199253661.933:568): login pid=1685 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199253661.941:569): user pid=1685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199253661.948:570): user pid=1685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199253661.948:571): user pid=1685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199257261.962:572): user pid=2752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199257261.962:573): user pid=2752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199257261.962:574): login pid=2752 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199257261.968:575): user pid=2752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199257261.973:576): user pid=2752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199257261.974:577): user pid=2752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199260861.987:578): user pid=3725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199260861.987:579): user pid=3725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199260861.988:580): login pid=3725 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199260861.993:581): user pid=3725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199260861.997:582): user pid=3725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199260861.997:583): user pid=3725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199264461.011:584): user pid=4674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199264461.011:585): user pid=4674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199264461.011:586): login pid=4674 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199264461.019:587): user pid=4674 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199264461.024:588): user pid=4674 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199264461.024:589): user pid=4674 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199268061.049:590): user pid=5632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199268061.049:591): user pid=5632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199268061.050:592): login pid=5632 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199268061.056:593): user pid=5632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199268061.061:594): user pid=5632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199268061.061:595): user pid=5632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199268121.067:596): user pid=5653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199268121.068:597): user pid=5653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199268121.068:598): login pid=5653 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199268121.076:599): user pid=5653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199268618.265:600): user pid=5653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199268618.265:601): user pid=5653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199271661.279:602): user pid=7113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199271661.280:603): user pid=7113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199271661.280:604): login pid=7113 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199271661.288:605): user pid=7113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199271661.293:606): user pid=7113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199271661.293:607): user pid=7113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199272458.808:608): user pid=7468 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199272458.808:609): user pid=7468 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199272459.014:610): user pid=7468 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272478.949:611): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.038:612): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.101:613): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.166:614): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.174:615): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.180:616): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.186:617): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.191:618): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.198:619): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.202:620): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.208:621): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.214:622): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.219:623): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.225:624): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.230:625): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.234:626): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272479.240:627): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199272491.842:628): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1199272501.277:629): user pid=7468 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1199272736.715:630): user pid=7676 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199272736.715:631): user pid=7676 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199272736.962:632): user pid=7676 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1199272753.520:633): user pid=7676 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199275267.874:634): user pid=8427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199275267.950:635): user pid=8427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199275267.968:636): login pid=8427 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199275277.326:637): user pid=8427 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199275295.497:638): user pid=8427 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199275296.172:639): user pid=8427 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=DAEMON_START msg=audit(1199275385.528:9938): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2013 res=success, auditd pid=2013 >type=CONFIG_CHANGE msg=audit(1199275385.627:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199275385.627:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1199275385.661:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199275385.661:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=LABEL_LEVEL_CHANGE msg=audit(1199275408.454:8): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199275408.611:9): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199275408.728:10): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199275408.746:11): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1199275408.752:12): avc: denied { getattr } for pid=2847 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199275408.752:12): arch=40000003 syscall=229 success=yes exit=33 a0=b9264588 a1=32d723 a2=b9263ca0 a3=ff items=0 ppid=2844 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1199275408.797:13): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199275408.800:14): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199275409.003:15): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1199275429.091:16): user pid=3185 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1199275429.099:17): user pid=3185 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1199275429.100:18): user pid=3185 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1199275429.114:19): login pid=3185 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1199275429.140:20): user pid=3185 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199275429.188:21): user pid=3185 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1199275429.190:22): user pid=3185 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1199275557.567:23): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4305 comm="rarian-sk-get-c" sig=11 >type=USER_ACCT msg=audit(1199278861.299:24): user pid=5390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199278861.300:25): user pid=5390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199278861.300:26): login pid=5390 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199278861.307:27): user pid=5390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199278861.353:28): user pid=5390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199278861.353:29): user pid=5390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199279701.362:30): user pid=5631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199279701.363:31): user pid=5631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199279701.363:32): login pid=5631 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199279701.370:33): user pid=5631 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199282461.838:34): user pid=6389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199282461.866:35): user pid=6389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199282461.866:36): login pid=6389 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199282461.901:37): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199282462.019:38): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199282462.019:39): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199286061.071:40): user pid=7418 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199286061.072:41): user pid=7418 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199286061.072:42): login pid=7418 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199286061.078:43): user pid=7418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199286061.081:44): user pid=7418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199286061.082:45): user pid=7418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199286321.251:46): user pid=7499 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1199286321.254:47): user pid=7499 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_START msg=audit(1199286321.396:48): user pid=7499 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_ACQ msg=audit(1199286321.429:49): user pid=7499 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_DISP msg=audit(1199286326.409:50): user pid=7499 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_END msg=audit(1199286326.411:51): user pid=7499 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1199289661.271:52): user pid=8913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199289661.272:53): user pid=8913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199289661.272:54): login pid=8913 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199289661.292:55): user pid=8913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199289661.340:56): user pid=8913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199289661.341:57): user pid=8913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199292855.368:58): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=10395 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199293261.454:59): user pid=10514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199293261.455:60): user pid=10514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199293261.455:61): login pid=10514 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199293261.486:62): user pid=10514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199293261.491:63): user pid=10514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199293261.491:64): user pid=10514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199296861.598:65): user pid=11546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199296861.599:66): user pid=11546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199296861.599:67): login pid=11546 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199296861.606:68): user pid=11546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199296861.658:69): user pid=11546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199296861.658:70): user pid=11546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199300461.766:71): user pid=12542 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199300461.767:72): user pid=12542 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199300461.767:73): login pid=12542 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199300461.798:74): user pid=12542 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199300461.804:75): user pid=12542 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199300461.804:76): user pid=12542 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199304061.855:77): user pid=13508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199304061.856:78): user pid=13508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199304061.856:79): login pid=13508 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199304061.864:80): user pid=13508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199304061.902:81): user pid=13508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199304061.902:82): user pid=13508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199307661.916:83): user pid=14485 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199307661.917:84): user pid=14485 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199307661.917:85): login pid=14485 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199307661.926:86): user pid=14485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199307661.931:87): user pid=14485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199307661.931:88): user pid=14485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199311261.965:89): user pid=15501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199311261.965:90): user pid=15501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199311261.965:91): login pid=15501 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199311261.972:92): user pid=15501 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199311261.977:93): user pid=15501 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199311261.977:94): user pid=15501 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199311470.278:95): user pid=3185 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1199311470.298:96): user pid=3185 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1199311472.826:97): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3106 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1199311492.670:9939): auditd normal halt, sending auid=4294967295 pid=16201 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2013 >type=DAEMON_START msg=audit(1199311845.269:7757): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1977 res=success, auditd pid=1977 >type=CONFIG_CHANGE msg=audit(1199311845.369:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199311845.369:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1199311845.402:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199311845.402:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=LABEL_LEVEL_CHANGE msg=audit(1199311868.056:8): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199311868.280:9): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199311868.353:10): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199311868.358:11): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1199311868.397:12): avc: denied { getattr } for pid=2821 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199311868.397:12): arch=40000003 syscall=229 success=yes exit=33 a0=b9156588 a1=32d723 a2=b9155ca0 a3=ff items=0 ppid=2810 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1199311868.471:13): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199311868.485:14): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199311868.688:15): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1199311888.692:16): user pid=3164 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1199311888.700:17): user pid=3164 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1199311888.701:18): user pid=3164 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1199311888.724:19): login pid=3164 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1199311888.749:20): user pid=3164 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199311888.799:21): user pid=3164 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1199311888.800:22): user pid=3164 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1199314861.842:23): user pid=5078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199314861.843:24): user pid=5078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199314861.843:25): login pid=5078 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199314861.850:26): user pid=5078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199314861.894:27): user pid=5078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199314861.894:28): user pid=5078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199318232.346:29): user pid=6047 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199318232.346:30): user pid=6047 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199318232.437:31): user pid=6047 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1199318294.904:32): user pid=6047 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199318461.909:33): user pid=6133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199318461.909:34): user pid=6133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199318461.910:35): login pid=6133 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199318461.917:36): user pid=6133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199318461.922:37): user pid=6133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199318461.922:38): user pid=6133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199322061.936:39): user pid=7119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199322061.936:40): user pid=7119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199322061.937:41): login pid=7119 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199322061.946:42): user pid=7119 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199322061.951:43): user pid=7119 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199322061.951:44): user pid=7119 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199325661.964:45): user pid=8090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199325661.964:46): user pid=8090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199325661.965:47): login pid=8090 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199325661.971:48): user pid=8090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199325661.976:49): user pid=8090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199325661.976:50): user pid=8090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199329261.989:51): user pid=9068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199329261.990:52): user pid=9068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199329261.990:53): login pid=9068 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199329261.998:54): user pid=9068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199329262.003:55): user pid=9068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199329262.004:56): user pid=9068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199332861.017:57): user pid=10101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199332861.018:58): user pid=10101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199332861.018:59): login pid=10101 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199332861.024:60): user pid=10101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199332861.029:61): user pid=10101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199332861.029:62): user pid=10101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199336461.043:63): user pid=11075 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199336461.044:64): user pid=11075 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199336461.044:65): login pid=11075 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199336461.052:66): user pid=11075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199336461.056:67): user pid=11075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199336461.057:68): user pid=11075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199340061.070:69): user pid=12047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199340061.070:70): user pid=12047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199340061.071:71): login pid=12047 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199340061.077:72): user pid=12047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199340061.082:73): user pid=12047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199340061.082:74): user pid=12047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199343661.096:75): user pid=13238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199343661.097:76): user pid=13238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199343661.097:77): login pid=13238 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199343661.104:78): user pid=13238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199343661.110:79): user pid=13238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199343661.110:80): user pid=13238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199347261.123:81): user pid=14210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199347261.124:82): user pid=14210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199347261.124:83): login pid=14210 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199347261.132:84): user pid=14210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199347261.137:85): user pid=14210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199347261.137:86): user pid=14210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199350742.384:87): user pid=15150 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199350742.384:88): user pid=15150 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199350742.404:89): user pid=15150 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1199350833.806:90): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=6058 comm="dbus-launch" sig=6 >type=USER_END msg=audit(1199350860.985:91): user pid=15150 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199350861.152:92): user pid=15237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199350861.153:93): user pid=15237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199350861.153:94): login pid=15237 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199350861.158:95): user pid=15237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199350861.165:96): user pid=15237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199350861.166:97): user pid=15237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199354461.180:98): user pid=16712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199354461.181:99): user pid=16712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199354461.181:100): login pid=16712 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199354461.188:101): user pid=16712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199354461.194:102): user pid=16712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199354461.194:103): user pid=16712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199354521.202:104): user pid=16732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199354521.202:105): user pid=16732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199354521.203:106): login pid=16732 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199354521.210:107): user pid=16732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199355051.796:108): user pid=16732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199355051.797:109): user pid=16732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199358061.811:110): user pid=18749 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199358061.812:111): user pid=18749 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199358061.812:112): login pid=18749 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199358061.819:113): user pid=18749 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199358061.824:114): user pid=18749 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199358061.824:115): user pid=18749 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199361661.837:116): user pid=19727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199361661.837:117): user pid=19727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199361661.837:118): login pid=19727 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199361661.845:119): user pid=19727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199361661.850:120): user pid=19727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199361661.850:121): user pid=19727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199365261.864:122): user pid=20711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199365261.865:123): user pid=20711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199365261.865:124): login pid=20711 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199365261.870:125): user pid=20711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199365261.875:126): user pid=20711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199365261.875:127): user pid=20711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199366101.884:128): user pid=21013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199366101.885:129): user pid=21013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199366101.885:130): login pid=21013 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199366101.892:131): user pid=21013 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199368861.420:132): user pid=21779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199368861.421:133): user pid=21779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199368861.421:134): login pid=21779 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199368861.429:135): user pid=21779 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199368861.435:136): user pid=21779 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199368861.435:137): user pid=21779 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199372461.448:138): user pid=22841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199372461.449:139): user pid=22841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199372461.449:140): login pid=22841 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199372461.455:141): user pid=22841 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199372461.460:142): user pid=22841 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199372461.460:143): user pid=22841 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199376061.474:144): user pid=23890 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199376061.475:145): user pid=23890 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199376061.475:146): login pid=23890 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199376061.482:147): user pid=23890 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199376061.487:148): user pid=23890 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199376061.487:149): user pid=23890 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199379661.586:150): user pid=24938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199379661.586:151): user pid=24938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199379661.586:152): login pid=24938 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199379661.607:153): user pid=24938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199379661.640:154): user pid=24938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199379661.640:155): user pid=24938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199383261.779:156): user pid=26984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199383261.798:157): user pid=26984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199383261.799:158): login pid=26984 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199383261.804:159): user pid=26984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199383261.839:160): user pid=26984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199383261.840:161): user pid=26984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199386861.854:162): user pid=27959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199386861.854:163): user pid=27959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199386861.854:164): login pid=27959 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199386861.860:165): user pid=27959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199386861.865:166): user pid=27959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199386861.865:167): user pid=27959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199390461.915:168): user pid=28934 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199390461.915:169): user pid=28934 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199390461.915:170): login pid=28934 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199390461.921:171): user pid=28934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199390461.961:172): user pid=28934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199390461.962:173): user pid=28934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199394061.993:174): user pid=29938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199394061.993:175): user pid=29938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199394061.994:176): login pid=29938 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199394062.000:177): user pid=29938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199394062.006:178): user pid=29938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199394062.006:179): user pid=29938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1199396131.417:180): dev=eth0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1199396131.417:180): arch=40000003 syscall=5 per=400000 success=yes exit=173 a0=bfe0f742 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=30773 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_ACCT msg=audit(1199397661.556:181): user pid=31263 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199397661.557:182): user pid=31263 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199397661.557:183): login pid=31263 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199397661.612:184): user pid=31263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199397661.766:185): user pid=31263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199397661.766:186): user pid=31263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199401261.785:187): user pid=32323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199401261.786:188): user pid=32323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199401261.786:189): login pid=32323 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199401261.793:190): user pid=32323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199401261.797:191): user pid=32323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199401261.798:192): user pid=32323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199404861.964:193): user pid=1008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199404861.965:194): user pid=1008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199404861.965:195): login pid=1008 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199404862.019:196): user pid=1008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199404862.056:197): user pid=1008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199404862.056:198): user pid=1008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199408461.070:199): user pid=2034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199408461.071:200): user pid=2034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199408461.071:201): login pid=2034 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199408461.077:202): user pid=2034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199408461.083:203): user pid=2034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199408461.083:204): user pid=2034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199412061.097:205): user pid=3182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199412061.098:206): user pid=3182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199412061.098:207): login pid=3182 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199412061.107:208): user pid=3182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199412061.113:209): user pid=3182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199412061.113:210): user pid=3182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199414224.664:211): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3831 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199415661.127:212): user pid=4238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199415661.127:213): user pid=4238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199415661.128:214): login pid=4238 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199415661.135:215): user pid=4238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199415661.140:216): user pid=4238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199415661.140:217): user pid=4238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199419261.153:218): user pid=5225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199419261.154:219): user pid=5225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199419261.154:220): login pid=5225 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199419261.161:221): user pid=5225 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199419261.166:222): user pid=5225 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199419261.166:223): user pid=5225 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199422861.179:224): user pid=6221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199422861.180:225): user pid=6221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199422861.180:226): login pid=6221 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199422861.187:227): user pid=6221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199422861.192:228): user pid=6221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199422861.192:229): user pid=6221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199426461.208:230): user pid=7253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199426461.209:231): user pid=7253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199426461.209:232): login pid=7253 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199426461.214:233): user pid=7253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199426461.219:234): user pid=7253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199426461.219:235): user pid=7253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199430061.232:236): user pid=8219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199430061.233:237): user pid=8219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199430061.233:238): login pid=8219 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199430061.240:239): user pid=8219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199430061.245:240): user pid=8219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199430061.245:241): user pid=8219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199433661.258:242): user pid=9188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199433661.258:243): user pid=9188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199433661.259:244): login pid=9188 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199433661.265:245): user pid=9188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199433661.270:246): user pid=9188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199433661.270:247): user pid=9188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199437261.284:248): user pid=10163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199437261.284:249): user pid=10163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199437261.285:250): login pid=10163 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199437261.294:251): user pid=10163 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199437261.298:252): user pid=10163 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199437261.299:253): user pid=10163 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199440861.310:254): user pid=11155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199440861.311:255): user pid=11155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199440861.311:256): login pid=11155 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199440861.318:257): user pid=11155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199440861.323:258): user pid=11155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199440861.323:259): user pid=11155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199440921.330:260): user pid=11172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199440921.330:261): user pid=11172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199440921.330:262): login pid=11172 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199440921.334:263): user pid=11172 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1199441362.218:264): dev=eth0 prom=0 old_prom=256 auid=500 >type=SYSCALL msg=audit(1199441362.218:264): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=ad a1=0 a2=bfe0fcdc a3=a3c12c8 items=0 ppid=1 pid=30773 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1199441408.865:265): dev=eth0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1199441408.865:265): arch=40000003 syscall=5 per=400000 success=yes exit=161 a0=bffb7672 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=11796 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1199441461.180:266): dev=eth0 prom=0 old_prom=256 auid=500 >type=SYSCALL msg=audit(1199441461.180:266): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=a1 a1=0 a2=bffb7c0c a3=8937bd8 items=0 ppid=1 pid=11796 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=CRED_DISP msg=audit(1199441485.879:267): user pid=11172 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199441485.879:268): user pid=11172 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199444461.908:269): user pid=13296 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199444461.909:270): user pid=13296 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199444461.909:271): login pid=13296 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199444461.915:272): user pid=13296 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199444461.920:273): user pid=13296 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199444461.920:274): user pid=13296 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199448061.933:275): user pid=14271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199448061.933:276): user pid=14271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199448061.934:277): login pid=14271 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199448061.941:278): user pid=14271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199448061.946:279): user pid=14271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199448061.946:280): user pid=14271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199451661.960:281): user pid=15247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199451661.960:282): user pid=15247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199451661.960:283): login pid=15247 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199451661.969:284): user pid=15247 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199451661.974:285): user pid=15247 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199451661.974:286): user pid=15247 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199452501.983:287): user pid=15487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199452501.983:288): user pid=15487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199452501.984:289): login pid=15487 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199452501.991:290): user pid=15487 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199455261.083:291): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199455261.083:292): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199455261.083:293): login pid=16254 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199455261.093:294): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199455261.098:295): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199455261.098:296): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199458861.111:297): user pid=17256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199458861.112:298): user pid=17256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199458861.112:299): login pid=17256 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199458861.119:300): user pid=17256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199458861.124:301): user pid=17256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199458861.124:302): user pid=17256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199460426.784:303): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17727 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199460452.020:304): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17751 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199460942.064:305): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17897 comm="gs" sig=11 >type=USER_AUTH msg=audit(1199460976.433:306): user pid=17919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199460976.433:307): user pid=17919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199460976.489:308): user pid=17919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.878:309): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.892:310): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.897:311): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.905:312): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.911:313): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.915:314): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.920:315): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.951:316): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.956:317): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.961:318): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.965:319): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.970:320): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.974:321): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.978:322): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.983:323): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.987:324): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199461008.991:325): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_AVC msg=audit(1199461028.225:326): user pid=2155 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.bluez.Manager member=DefaultAdapter dest=org.bluez spid=18010 tpid=2428 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1199461028.463:327): user pid=2155 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=error error_name=org.bluez.Error.NoSuchAdapter dest=:1.86 spid=2428 tpid=18010 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1199461617.139:328): avc: denied { getattr } for pid=2821 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199461617.139:328): arch=40000003 syscall=229 success=yes exit=33 a0=b98bb318 a1=32d723 a2=b98b8828 a3=ff items=0 ppid=1 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1199461617.140:329): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1199461619.783:330): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=17931 comm="dbus-launch" sig=6 >type=AVC msg=audit(1199461628.284:331): avc: denied { write } for pid=2821 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199461628.284:331): arch=40000003 syscall=5 success=yes exit=20 a0=b91561a5 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199461628.363:332): avc: denied { ioctl } for pid=18190 comm="foomatic-rip" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199461628.363:332): arch=40000003 syscall=54 success=no exit=-25 a0=1 a1=5401 a2=bfa0e7b8 a3=bfa0e7f8 items=0 ppid=2821 pid=18190 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199461749.651:333): avc: denied { write } for pid=2821 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199461749.651:333): arch=40000003 syscall=5 success=yes exit=20 a0=b91561a5 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199461749.662:334): avc: denied { ioctl } for pid=18258 comm="foomatic-rip" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199461749.662:334): arch=40000003 syscall=54 success=no exit=-25 a0=1 a1=5401 a2=bf98e738 a3=bf98e778 items=0 ppid=2821 pid=18258 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1199461909.421:335): user pid=17919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1199462122.781:336): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18470 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199462258.919:337): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18531 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199462288.929:338): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18557 comm="gs" sig=11 >type=AVC msg=audit(1199462347.397:339): avc: denied { write } for pid=18590 comm="foo2lava-wrappe" name="set" dev=dm-0 ino=8061080 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1199462347.397:339): arch=40000003 syscall=5 success=yes exit=5 a0=860d4a0 a1=8241 a2=1b6 a3=8241 items=0 ppid=18588 pid=18590 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2lava-wrappe" exe="/bin/bash" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199462347.399:340): avc: denied { setattr } for pid=18592 comm="chmod" name="set" dev=dm-0 ino=8061080 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1199462347.399:340): arch=40000003 syscall=306 success=no exit=-1 a0=ffffff9c a1=96d18d8 a2=1b6 a3=96d18d8 items=0 ppid=18590 pid=18592 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="chmod" exe="/bin/chmod" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1199462461.141:341): user pid=18650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199462461.142:342): user pid=18650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199462461.142:343): login pid=18650 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199462461.148:344): user pid=18650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199462461.155:345): user pid=18650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199462461.155:346): user pid=18650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199462590.985:347): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18704 comm="gs" sig=11 >type=LABEL_LEVEL_CHANGE msg=audit(1199462795.851:348): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199462795.855:349): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199462795.876:350): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199462795.881:351): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1199462795.886:352): avc: denied { getattr } for pid=18823 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199462795.886:352): arch=40000003 syscall=229 success=yes exit=33 a0=41eb8588 a1=402a6723 a2=41eb7ca0 a3=ff items=0 ppid=18822 pid=18823 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1199462795.886:353): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199462795.891:354): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199462795.937:355): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199462795.942:356): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1199462829.525:357): avc: denied { write } for pid=18823 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199462829.525:357): arch=40000003 syscall=5 success=yes exit=19 a0=41eb81a5 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=18823 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199462829.530:358): avc: denied { ioctl } for pid=18840 comm="foomatic-rip" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199462829.530:358): arch=40000003 syscall=54 success=no exit=-25 a0=1 a1=5401 a2=bfeec4c8 a3=bfeec508 items=0 ppid=18823 pid=18840 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1199463089.380:359): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199463089.383:360): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199463089.386:361): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199463089.389:362): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1199463089.392:363): avc: denied { getattr } for pid=19366 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199463089.392:363): arch=40000003 syscall=229 success=yes exit=33 a0=419a5588 a1=402a6723 a2=419a4ca0 a3=ff items=0 ppid=19365 pid=19366 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1199463089.393:364): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199463089.396:365): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199463089.400:366): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1199463089.403:367): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1199464422.203:368): user pid=19886 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_ACCT msg=audit(1199464422.206:369): user pid=19886 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_START msg=audit(1199464422.223:370): user pid=19886 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=CRED_ACQ msg=audit(1199464422.241:371): user pid=19886 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=CRED_DISP msg=audit(1199464426.343:372): user pid=19886 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_END msg=audit(1199464426.343:373): user pid=19886 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_AUTH msg=audit(1199464435.723:374): user pid=19934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=rick exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_ACCT msg=audit(1199464435.727:375): user pid=19934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=rick exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_START msg=audit(1199464435.743:376): user pid=19934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=rick exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=CRED_ACQ msg=audit(1199464435.743:377): user pid=19934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=rick exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=CRED_DISP msg=audit(1199464472.107:378): user pid=19934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=rick exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_END msg=audit(1199464472.107:379): user pid=19934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=rick exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_AUTH msg=audit(1199464506.188:380): user pid=20021 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_ACCT msg=audit(1199464506.191:381): user pid=20021 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_START msg=audit(1199464506.209:382): user pid=20021 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=CRED_ACQ msg=audit(1199464506.210:383): user pid=20021 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=CRED_DISP msg=audit(1199464607.691:384): user pid=20021 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_END msg=audit(1199464607.692:385): user pid=20021 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_AUTH msg=audit(1199464612.269:386): user pid=20117 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_ACCT msg=audit(1199464612.273:387): user pid=20117 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_START msg=audit(1199464612.288:388): user pid=20117 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=CRED_ACQ msg=audit(1199464612.288:389): user pid=20117 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=ANOM_ABEND msg=audit(1199464650.026:390): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=20186 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199464723.911:391): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=20230 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199464799.605:392): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=20274 comm="gs" sig=11 >type=USER_ACCT msg=audit(1199466061.171:393): user pid=20636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199466061.172:394): user pid=20636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199466061.172:395): login pid=20636 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199466061.179:396): user pid=20636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199466061.184:397): user pid=20636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199466061.185:398): user pid=20636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199469661.198:399): user pid=21610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199469661.199:400): user pid=21610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199469661.199:401): login pid=21610 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199469661.207:402): user pid=21610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199469661.213:403): user pid=21610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199469661.213:404): user pid=21610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199473261.229:405): user pid=23222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199473261.230:406): user pid=23222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199473261.231:407): login pid=23222 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199473261.237:408): user pid=23222 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199473261.244:409): user pid=23222 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199473261.244:410): user pid=23222 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199476861.265:411): user pid=24752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199476861.265:412): user pid=24752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199476861.266:413): login pid=24752 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199476861.273:414): user pid=24752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199476861.278:415): user pid=24752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199476861.278:416): user pid=24752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199480461.292:417): user pid=25748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199480461.292:418): user pid=25748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199480461.293:419): login pid=25748 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199480461.302:420): user pid=25748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199480461.307:421): user pid=25748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199480461.307:422): user pid=25748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199483393.757:423): user pid=20117 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=USER_END msg=audit(1199483393.757:424): user pid=20117 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)' >type=ANOM_ABEND msg=audit(1199483451.412:425): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26691 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199483503.648:426): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26725 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1199483602.054:427): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26765 comm="gs" sig=11 >type=USER_ACCT msg=audit(1199484061.321:428): user pid=26896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199484061.322:429): user pid=26896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199484061.322:430): login pid=26896 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199484061.330:431): user pid=26896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199484061.335:432): user pid=26896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199484061.335:433): user pid=26896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199487661.349:434): user pid=28363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199487661.350:435): user pid=28363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199487661.350:436): login pid=28363 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199487661.358:437): user pid=28363 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199487661.363:438): user pid=28363 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199487661.364:439): user pid=28363 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199491261.377:440): user pid=29383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199491261.377:441): user pid=29383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199491261.377:442): login pid=29383 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199491261.386:443): user pid=29383 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199491261.391:444): user pid=29383 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199491261.391:445): user pid=29383 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199494861.404:446): user pid=30368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199494861.405:447): user pid=30368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199494861.405:448): login pid=30368 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199494861.413:449): user pid=30368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199494861.417:450): user pid=30368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199494861.417:451): user pid=30368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199498461.431:452): user pid=31347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199498461.431:453): user pid=31347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199498461.431:454): login pid=31347 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199498461.438:455): user pid=31347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199498461.442:456): user pid=31347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199498461.442:457): user pid=31347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199502061.456:458): user pid=412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199502061.457:459): user pid=412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199502061.457:460): login pid=412 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199502061.463:461): user pid=412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199502061.469:462): user pid=412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199502061.469:463): user pid=412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199505661.483:464): user pid=1795 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199505661.483:465): user pid=1795 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199505661.483:466): login pid=1795 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199505661.492:467): user pid=1795 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199505661.497:468): user pid=1795 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199505661.497:469): user pid=1795 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199509261.510:470): user pid=2926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199509261.511:471): user pid=2926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199509261.511:472): login pid=2926 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199509261.519:473): user pid=2926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199509261.524:474): user pid=2926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199509261.524:475): user pid=2926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199512861.537:476): user pid=3981 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199512861.538:477): user pid=3981 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199512861.538:478): login pid=3981 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199512861.544:479): user pid=3981 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199512861.549:480): user pid=3981 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199512861.550:481): user pid=3981 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199516461.563:482): user pid=4976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199516461.563:483): user pid=4976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199516461.564:484): login pid=4976 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199516461.570:485): user pid=4976 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199516461.575:486): user pid=4976 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199516461.575:487): user pid=4976 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199520061.588:488): user pid=5948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199520061.589:489): user pid=5948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199520061.589:490): login pid=5948 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199520061.598:491): user pid=5948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199520061.603:492): user pid=5948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199520061.603:493): user pid=5948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199523661.616:494): user pid=6924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199523661.617:495): user pid=6924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199523661.617:496): login pid=6924 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199523661.625:497): user pid=6924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199523661.630:498): user pid=6924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199523661.630:499): user pid=6924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199527261.645:500): user pid=7944 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199527261.645:501): user pid=7944 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199527261.646:502): login pid=7944 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199527261.652:503): user pid=7944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199527261.657:504): user pid=7944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199527261.657:505): user pid=7944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199527321.665:506): user pid=7969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199527321.665:507): user pid=7969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199527321.665:508): login pid=7969 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199527321.674:509): user pid=7969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199527991.221:510): user pid=7969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199527991.221:511): user pid=7969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199530861.234:512): user pid=11433 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199530861.235:513): user pid=11433 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199530861.235:514): login pid=11433 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199530861.244:515): user pid=11433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199530861.249:516): user pid=11433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199530861.249:517): user pid=11433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199534461.262:518): user pid=12414 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199534461.263:519): user pid=12414 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199534461.263:520): login pid=12414 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199534461.271:521): user pid=12414 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199534461.276:522): user pid=12414 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199534461.276:523): user pid=12414 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199538061.290:524): user pid=13397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199538061.291:525): user pid=13397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199538061.291:526): login pid=13397 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199538061.298:527): user pid=13397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199538061.303:528): user pid=13397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199538061.303:529): user pid=13397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199538901.311:530): user pid=13631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199538901.312:531): user pid=13631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199538901.312:532): login pid=13631 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199538901.319:533): user pid=13631 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199539458.662:534): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13803 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199541661.238:535): user pid=14404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199541661.238:536): user pid=14404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199541661.238:537): login pid=14404 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199541661.247:538): user pid=14404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199541661.275:539): user pid=14404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199541661.275:540): user pid=14404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199545261.290:541): user pid=15530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199545261.291:542): user pid=15530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199545261.291:543): login pid=15530 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199545261.297:544): user pid=15530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199545261.303:545): user pid=15530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199545261.303:546): user pid=15530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199548861.317:547): user pid=17902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199548861.318:548): user pid=17902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199548861.318:549): login pid=17902 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199548861.327:550): user pid=17902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199548861.333:551): user pid=17902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199548861.334:552): user pid=17902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199552461.347:553): user pid=18972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199552461.348:554): user pid=18972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199552461.348:555): login pid=18972 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199552461.356:556): user pid=18972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199552461.361:557): user pid=18972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199552461.362:558): user pid=18972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199555009.846:559): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19691 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199556061.375:560): user pid=19976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199556061.376:561): user pid=19976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199556061.376:562): login pid=19976 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199556061.383:563): user pid=19976 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199556061.388:564): user pid=19976 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199556061.389:565): user pid=19976 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199559661.402:566): user pid=20969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199559661.403:567): user pid=20969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199559661.403:568): login pid=20969 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199559661.412:569): user pid=20969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199559661.417:570): user pid=20969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199559661.417:571): user pid=20969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199563261.432:572): user pid=22071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199563261.433:573): user pid=22071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199563261.433:574): login pid=22071 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199563261.443:575): user pid=22071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199563261.448:576): user pid=22071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199563261.448:577): user pid=22071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199566861.462:578): user pid=23097 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199566861.463:579): user pid=23097 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199566861.463:580): login pid=23097 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199566861.470:581): user pid=23097 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199566861.475:582): user pid=23097 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199566861.476:583): user pid=23097 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199570461.489:584): user pid=24078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199570461.489:585): user pid=24078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199570461.489:586): login pid=24078 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199570461.500:587): user pid=24078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199570461.504:588): user pid=24078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199570461.504:589): user pid=24078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199574061.517:590): user pid=25120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199574061.518:591): user pid=25120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199574061.518:592): login pid=25120 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199574061.526:593): user pid=25120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199574061.532:594): user pid=25120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199574061.533:595): user pid=25120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199577661.548:596): user pid=26132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199577661.548:597): user pid=26132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199577661.549:598): login pid=26132 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199577661.553:599): user pid=26132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199577661.558:600): user pid=26132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199577661.558:601): user pid=26132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199581261.572:602): user pid=27175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199581261.573:603): user pid=27175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199581261.573:604): login pid=27175 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199581261.580:605): user pid=27175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199581261.586:606): user pid=27175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199581261.586:607): user pid=27175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199584861.599:608): user pid=28160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199584861.600:609): user pid=28160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199584861.600:610): login pid=28160 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199584861.609:611): user pid=28160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199584861.614:612): user pid=28160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199584861.615:613): user pid=28160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199588461.628:614): user pid=29234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199588461.628:615): user pid=29234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199588461.629:616): login pid=29234 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199588461.637:617): user pid=29234 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199588461.641:618): user pid=29234 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199588461.641:619): user pid=29234 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199588837.594:620): user pid=29356 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ACCT msg=audit(1199592061.656:621): user pid=30770 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199592061.656:622): user pid=30770 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199592061.656:623): login pid=30770 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199592061.666:624): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199592061.671:625): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199592061.671:626): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199592092.627:627): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=30784 comm="ekiga" sig=6 >type=USER_AUTH msg=audit(1199593201.915:628): user pid=31108 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1199593201.919:629): user pid=31108 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_START msg=audit(1199593202.036:630): user pid=31108 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_ACQ msg=audit(1199593202.047:631): user pid=31108 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_DISP msg=audit(1199593209.755:632): user pid=31108 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_END msg=audit(1199593209.756:633): user pid=31108 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1199595661.685:634): user pid=31833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199595661.686:635): user pid=31833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199595661.686:636): login pid=31833 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199595661.695:637): user pid=31833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199595661.700:638): user pid=31833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199595661.700:639): user pid=31833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199599261.715:640): user pid=5779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199599261.715:641): user pid=5779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199599261.716:642): login pid=5779 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199599261.724:643): user pid=5779 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199599261.729:644): user pid=5779 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199599261.729:645): user pid=5779 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199599854.657:646): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5894 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199602861.742:647): user pid=6621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199602861.743:648): user pid=6621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199602861.743:649): login pid=6621 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199602861.749:650): user pid=6621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199602861.754:651): user pid=6621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199602861.755:652): user pid=6621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199606461.773:653): user pid=7614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199606461.774:654): user pid=7614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199606461.774:655): login pid=7614 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199606461.781:656): user pid=7614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199606461.786:657): user pid=7614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199606461.786:658): user pid=7614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199610061.800:659): user pid=8601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199610061.800:660): user pid=8601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199610061.800:661): login pid=8601 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199610061.810:662): user pid=8601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199610061.815:663): user pid=8601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199610061.815:664): user pid=8601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199613661.829:665): user pid=9579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199613661.829:666): user pid=9579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199613661.829:667): login pid=9579 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199613661.836:668): user pid=9579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199613661.841:669): user pid=9579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199613661.841:670): user pid=9579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199613721.848:671): user pid=9598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199613721.849:672): user pid=9598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199613721.849:673): login pid=9598 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199613721.854:674): user pid=9598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199614219.499:675): user pid=9598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199614219.500:676): user pid=9598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199614921.509:677): user pid=10538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199614921.510:678): user pid=10538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199614921.510:679): login pid=10538 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199614921.516:680): user pid=10538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199615624.827:681): user pid=10538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199615624.828:682): user pid=10538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199617261.838:683): user pid=16155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199617261.838:684): user pid=16155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199617261.838:685): login pid=16155 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199617261.848:686): user pid=16155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199617261.853:687): user pid=16155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199617261.854:688): user pid=16155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199620861.867:689): user pid=17130 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199620861.867:690): user pid=17130 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199620861.868:691): login pid=17130 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199620861.875:692): user pid=17130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199620861.880:693): user pid=17130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199620861.880:694): user pid=17130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199624461.894:695): user pid=18134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199624461.895:696): user pid=18134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199624461.895:697): login pid=18134 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199624461.902:698): user pid=18134 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199624461.907:699): user pid=18134 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199624461.907:700): user pid=18134 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199625301.915:701): user pid=18404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199625301.916:702): user pid=18404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199625301.916:703): login pid=18404 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199625301.922:704): user pid=18404 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199628061.826:705): user pid=19164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199628061.854:706): user pid=19164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199628061.854:707): login pid=19164 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199628061.889:708): user pid=19164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199628062.031:709): user pid=19164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199628062.032:710): user pid=19164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199631565.725:711): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20119 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199631661.044:712): user pid=20146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199631661.045:713): user pid=20146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199631661.045:714): login pid=20146 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199631661.048:715): user pid=20146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199631661.054:716): user pid=20146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199631661.054:717): user pid=20146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199632908.865:718): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20488 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199635261.068:719): user pid=21148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199635261.069:720): user pid=21148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199635261.069:721): login pid=21148 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199635261.074:722): user pid=21148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199635261.079:723): user pid=21148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199635261.079:724): user pid=21148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199638861.093:725): user pid=22152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199638861.094:726): user pid=22152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199638861.094:727): login pid=22152 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199638861.100:728): user pid=22152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199638861.105:729): user pid=22152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199638861.105:730): user pid=22152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199639836.882:731): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=22491 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199642461.118:732): user pid=23200 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199642461.118:733): user pid=23200 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199642461.118:734): login pid=23200 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199642461.126:735): user pid=23200 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199642461.131:736): user pid=23200 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199642461.131:737): user pid=23200 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199646061.145:738): user pid=24181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199646061.145:739): user pid=24181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199646061.146:740): login pid=24181 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199646061.152:741): user pid=24181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199646061.156:742): user pid=24181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199646061.157:743): user pid=24181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199649661.170:744): user pid=25164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199649661.171:745): user pid=25164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199649661.171:746): login pid=25164 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199649661.178:747): user pid=25164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199649661.183:748): user pid=25164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199649661.183:749): user pid=25164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199653261.197:750): user pid=26151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199653261.198:751): user pid=26151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199653261.198:752): login pid=26151 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199653261.205:753): user pid=26151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199653261.210:754): user pid=26151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199653261.210:755): user pid=26151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199656861.240:756): user pid=27135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199656861.240:757): user pid=27135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199656861.241:758): login pid=27135 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199656861.249:759): user pid=27135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199656861.254:760): user pid=27135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199656861.254:761): user pid=27135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199659968.151:762): avc: denied { search } for pid=10194 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1199659968.151:762): avc: denied { read } for pid=10194 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=AVC msg=audit(1199659968.151:762): avc: denied { getattr } for pid=10194 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199659968.151:762): arch=40000003 syscall=195 success=yes exit=0 a0=b8ebd9c0 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10194 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199659968.209:763): avc: denied { read } for pid=10194 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199659968.209:763): arch=40000003 syscall=5 success=yes exit=17 a0=b8ebdd60 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10194 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1199660461.267:764): user pid=28122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199660461.267:765): user pid=28122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199660461.267:766): login pid=28122 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199660461.274:767): user pid=28122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199660461.278:768): user pid=28122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199660461.279:769): user pid=28122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199664061.294:770): user pid=29398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199664061.295:771): user pid=29398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199664061.295:772): login pid=29398 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199664061.303:773): user pid=29398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199664061.309:774): user pid=29398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199664061.310:775): user pid=29398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199667661.323:776): user pid=30380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199667661.324:777): user pid=30380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199667661.324:778): login pid=30380 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199667661.332:779): user pid=30380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199667661.338:780): user pid=30380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199667661.338:781): user pid=30380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199669982.185:782): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=31038 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199671261.352:783): user pid=31385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199671261.352:784): user pid=31385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199671261.353:785): login pid=31385 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199671261.358:786): user pid=31385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199671261.363:787): user pid=31385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199671261.363:788): user pid=31385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199674861.377:789): user pid=32461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199674861.377:790): user pid=32461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199674861.378:791): login pid=32461 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199674861.384:792): user pid=32461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199674861.389:793): user pid=32461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199674861.390:794): user pid=32461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199678461.404:795): user pid=1060 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199678461.404:796): user pid=1060 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199678461.404:797): login pid=1060 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199678461.411:798): user pid=1060 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199678461.416:799): user pid=1060 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199678461.416:800): user pid=1060 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199682061.430:801): user pid=2064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199682061.430:802): user pid=2064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199682061.431:803): login pid=2064 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199682061.438:804): user pid=2064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199682061.443:805): user pid=2064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199682061.443:806): user pid=2064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199685661.457:807): user pid=3179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199685661.457:808): user pid=3179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199685661.458:809): login pid=3179 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199685661.465:810): user pid=3179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199685661.470:811): user pid=3179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199685661.470:812): user pid=3179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199689261.484:813): user pid=4222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199689261.484:814): user pid=4222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199689261.485:815): login pid=4222 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199689261.491:816): user pid=4222 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199689261.496:817): user pid=4222 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199689261.496:818): user pid=4222 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199692861.509:819): user pid=6669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199692861.510:820): user pid=6669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199692861.510:821): login pid=6669 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199692861.515:822): user pid=6669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199692861.520:823): user pid=6669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199692861.520:824): user pid=6669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199696461.535:825): user pid=8626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199696461.535:826): user pid=8626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199696461.535:827): login pid=8626 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199696461.544:828): user pid=8626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199696461.548:829): user pid=8626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199696461.548:830): user pid=8626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199700061.562:831): user pid=9608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199700061.563:832): user pid=9608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199700061.563:833): login pid=9608 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199700061.569:834): user pid=9608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199700061.574:835): user pid=9608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199700061.575:836): user pid=9608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199700121.581:837): user pid=9624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199700121.582:838): user pid=9624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199700121.582:839): login pid=9624 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199700121.591:840): user pid=9624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199700664.017:841): user pid=9624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199700664.017:842): user pid=9624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199703661.031:843): user pid=11224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199703661.031:844): user pid=11224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199703661.032:845): login pid=11224 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199703661.039:846): user pid=11224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199703661.045:847): user pid=11224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199703661.045:848): user pid=11224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199707261.059:849): user pid=12203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199707261.060:850): user pid=12203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199707261.060:851): login pid=12203 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199707261.066:852): user pid=12203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199707261.071:853): user pid=12203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199707261.071:854): user pid=12203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199710861.086:855): user pid=13268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199710861.086:856): user pid=13268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199710861.086:857): login pid=13268 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199710861.095:858): user pid=13268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199710861.101:859): user pid=13268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199710861.101:860): user pid=13268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199711701.110:861): user pid=13511 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199711701.111:862): user pid=13511 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199711701.111:863): login pid=13511 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199711701.116:864): user pid=13511 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199714461.152:865): user pid=14274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199714461.172:866): user pid=14274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199714461.172:867): login pid=14274 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199714461.176:868): user pid=14274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199714461.182:869): user pid=14274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199714461.182:870): user pid=14274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199717786.794:871): avc: denied { read } for pid=15199 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199717786.794:871): arch=40000003 syscall=5 success=yes exit=3 a0=9b86c18 a1=8000 a2=0 a3=8000 items=0 ppid=10195 pid=15199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1199717786.814:872): avc: denied { ioctl } for pid=15199 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199717786.814:872): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bfa48f98 a3=bfa48fd8 items=0 ppid=10195 pid=15199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1199717786.814:873): avc: denied { getattr } for pid=15199 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199717786.814:873): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=9b6a068 a2=776ff4 a3=9b80818 items=0 ppid=10195 pid=15199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1199717928.706:874): avc: denied { search } for pid=15243 comm="CID.cgi" name=".tkcid" dev=dm-0 ino=23625733 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1199717928.706:874): arch=40000003 syscall=5 success=yes exit=3 a0=8cc3c18 a1=8000 a2=0 a3=8000 items=0 ppid=10197 pid=15243 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=USER_ACCT msg=audit(1199718061.196:875): user pid=15288 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199718061.197:876): user pid=15288 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199718061.197:877): login pid=15288 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199718061.206:878): user pid=15288 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199718061.212:879): user pid=15288 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199718061.212:880): user pid=15288 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199721661.228:881): user pid=16846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199721661.229:882): user pid=16846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199721661.230:883): login pid=16846 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199721661.234:884): user pid=16846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199721661.244:885): user pid=16846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199721661.244:886): user pid=16846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199725261.261:887): user pid=19508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199725261.262:888): user pid=19508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199725261.262:889): login pid=19508 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199725261.269:890): user pid=19508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199725261.279:891): user pid=19508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199725261.279:892): user pid=19508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199728861.293:893): user pid=20494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199728861.296:894): user pid=20494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199728861.297:895): login pid=20494 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199728861.301:896): user pid=20494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199728861.307:897): user pid=20494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199728861.307:898): user pid=20494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199731415.806:899): avc: denied { associate } for pid=21234 comm="cp" name="volume080107_1" scontext=system_u:object_r:iso9660_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1199731415.806:899): arch=40000003 syscall=39 success=yes exit=0 a0=bf8ca58e a1=140 a2=8058394 a3=580 items=0 ppid=3829 pid=21234 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts16 comm="cp" exe="/bin/cp" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_ACCT msg=audit(1199732461.335:900): user pid=21739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199732461.336:901): user pid=21739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199732461.336:902): login pid=21739 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199732461.343:903): user pid=21739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199732461.358:904): user pid=21739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199732461.358:905): user pid=21739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199732483.590:906): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=21753 comm="f-spot" sig=6 >type=USER_AUTH msg=audit(1199733655.145:907): user pid=22089 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199733655.145:908): user pid=22089 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199733655.244:909): user pid=22089 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1199734017.417:910): user pid=22089 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1199734040.527:911): dev=eth0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1199734040.527:911): arch=40000003 syscall=5 per=400000 success=yes exit=158 a0=bf921192 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=22461 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_AUTH msg=audit(1199735934.275:912): user pid=23052 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199735934.276:913): user pid=23052 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199735934.286:914): user pid=23052 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1199736042.531:915): user pid=23052 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1199736050.946:916): user pid=23151 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199736050.946:917): user pid=23151 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199736050.955:918): user pid=23151 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199736061.403:919): user pid=23193 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199736061.404:920): user pid=23193 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199736061.404:921): login pid=23193 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199736061.412:922): user pid=23193 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199736061.444:923): user pid=23193 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199736061.444:924): user pid=23193 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199736064.635:925): user pid=23151 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1199736184.565:926): avc: denied { search } for pid=23248 comm="smbd" name="home" dev=dm-0 ino=23166977 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1199736184.565:926): avc: denied { getattr } for pid=23248 comm="smbd" path="/home/rick" dev=dm-0 ino=23265282 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1199736184.565:926): arch=40000003 syscall=195 success=yes exit=0 a0=b869b998 a1=bfa62fe0 a2=4c7ff4 a3=bfa62fe0 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736184.731:927): avc: denied { read } for pid=23248 comm="smbd" name="rick" dev=dm-0 ino=23265282 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1199736184.731:927): arch=40000003 syscall=5 success=yes exit=25 a0=b8632a40 a1=98800 a2=37bd9c a3=b8687e58 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736184.731:928): avc: denied { getattr } for pid=23248 comm="smbd" path="/home/rick/.randsig1.pl" dev=dm-0 ino=23266693 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199736184.731:928): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736184.732:929): avc: denied { getattr } for pid=23248 comm="smbd" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1199736184.732:929): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736184.732:930): avc: denied { getattr } for pid=23248 comm="smbd" path="/home/rick/video.mpg" dev=dm-0 ino=23265285 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1199736184.732:930): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736184.740:931): avc: denied { getattr } for pid=23248 comm="smbd" path="/home/rick/.mime.types" dev=dm-0 ino=8061162 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1199736184.740:931): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736184.741:932): avc: denied { read } for pid=23248 comm="smbd" name=".DCOPserver_dual.rkkda.com_:0" dev=dm-0 ino=23270712 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1199736184.741:932): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736184.748:933): avc: denied { getattr } for pid=23248 comm="smbd" path="/home/rick/.tkcid" dev=dm-0 ino=23625733 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1199736184.748:933): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736184.754:934): avc: denied { getattr } for pid=23248 comm="smbd" path="/home/rick/.Devhelp.rick" dev=dm-0 ino=23265283 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199736184.754:934): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736210.899:935): avc: denied { getattr } for pid=23248 comm="smbd" path="/home/rick/Personal/ParkNicollet/volume080107_1" dev=dm-0 ino=39847899 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:iso9660_t:s0 tclass=dir >type=SYSCALL msg=audit(1199736210.899:935): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736210.900:936): avc: denied { search } for pid=23248 comm="smbd" name="volume080107_1" dev=dm-0 ino=39847899 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:iso9660_t:s0 tclass=dir >type=SYSCALL msg=audit(1199736210.900:936): arch=40000003 syscall=195 success=no exit=-2 a0=bfa63c00 a1=bfa61fb0 a2=4c7ff4 a3=bfa61fb0 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736210.909:937): avc: denied { read } for pid=23248 comm="smbd" name="volume080107_1" dev=dm-0 ino=39847899 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:iso9660_t:s0 tclass=dir >type=SYSCALL msg=audit(1199736210.909:937): arch=40000003 syscall=5 success=yes exit=26 a0=b86eaa88 a1=98800 a2=25 a3=b8687e58 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736213.167:938): avc: denied { getattr } for pid=23248 comm="smbd" path="/home/rick/Personal/ParkNicollet/volume080107_1/DicomParser.dll" dev=dm-0 ino=39848014 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:iso9660_t:s0 tclass=file >type=SYSCALL msg=audit(1199736213.167:938): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736213.471:939): avc: denied { read } for pid=23248 comm="smbd" name="SHELEXEC.EXE" dev=dm-0 ino=39848021 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:iso9660_t:s0 tclass=file >type=SYSCALL msg=audit(1199736213.471:939): arch=40000003 syscall=5 success=yes exit=26 a0=bfa63cd4 a1=8000 a2=0 a3=8000 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736213.472:940): avc: denied { lock } for pid=23248 comm="smbd" path="/home/rick/Personal/ParkNicollet/volume080107_1/SHELEXEC.EXE" dev=dm-0 ino=39848021 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:iso9660_t:s0 tclass=file >type=SYSCALL msg=audit(1199736213.472:940): arch=40000003 syscall=221 success=yes exit=0 a0=1a a1=400 a2=1 a3=1 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1199736673.039:941): avc: denied { getattr } for pid=23248 comm="smbd" path="/home/rick/.Devhelp.rick" dev=dm-0 ino=23265283 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199736673.039:941): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1199736824.458:942): dev=eth0 prom=0 old_prom=256 auid=500 >type=SYSCALL msg=audit(1199736824.458:942): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=9e a1=0 a2=bf92174c a3=9d6e7b0 items=0 ppid=1 pid=22461 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1199738610.566:943): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=23937 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199739661.482:944): user pid=24223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199739661.483:945): user pid=24223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199739661.483:946): login pid=24223 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199739661.492:947): user pid=24223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199739661.498:948): user pid=24223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199739661.498:949): user pid=24223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199743261.512:950): user pid=25201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199743261.512:951): user pid=25201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199743261.512:952): login pid=25201 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199743261.522:953): user pid=25201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199743261.527:954): user pid=25201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199743261.528:955): user pid=25201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199746861.542:956): user pid=26254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199746861.542:957): user pid=26254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199746861.542:958): login pid=26254 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199746861.550:959): user pid=26254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199746861.556:960): user pid=26254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199746861.556:961): user pid=26254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199747233.734:962): user pid=26371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1199747233.737:963): user pid=26371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_START msg=audit(1199747233.748:964): user pid=26371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_ACQ msg=audit(1199747233.772:965): user pid=26371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_DISP msg=audit(1199747239.636:966): user pid=26371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_END msg=audit(1199747239.637:967): user pid=26371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1199750461.570:968): user pid=27264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199750461.571:969): user pid=27264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199750461.571:970): login pid=27264 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199750461.579:971): user pid=27264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199750461.584:972): user pid=27264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199750461.584:973): user pid=27264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199754061.598:974): user pid=28413 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199754061.599:975): user pid=28413 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199754061.599:976): login pid=28413 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199754061.606:977): user pid=28413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199754061.611:978): user pid=28413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199754061.611:979): user pid=28413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199757661.625:980): user pid=29380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199757661.625:981): user pid=29380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199757661.626:982): login pid=29380 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199757661.634:983): user pid=29380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199757661.638:984): user pid=29380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199757661.638:985): user pid=29380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199761261.653:986): user pid=30994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199761261.654:987): user pid=30994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199761261.654:988): login pid=30994 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199761261.664:989): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199761261.670:990): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199761261.671:991): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199764861.684:992): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199764861.685:993): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199764861.685:994): login pid=31978 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199764861.694:995): user pid=31978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199764861.698:996): user pid=31978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199764861.699:997): user pid=31978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199768461.712:998): user pid=488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199768461.712:999): user pid=488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199768461.713:1000): login pid=488 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199768461.718:1001): user pid=488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199768461.723:1002): user pid=488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199768461.723:1003): user pid=488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199772061.736:1004): user pid=1476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199772061.736:1005): user pid=1476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199772061.736:1006): login pid=1476 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199772061.744:1007): user pid=1476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199772061.748:1008): user pid=1476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199772061.748:1009): user pid=1476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199775661.761:1010): user pid=2486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199775661.762:1011): user pid=2486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199775661.762:1012): login pid=2486 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199775661.768:1013): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199775661.773:1014): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199775661.773:1015): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199779261.787:1016): user pid=3614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199779261.787:1017): user pid=3614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199779261.787:1018): login pid=3614 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199779261.795:1019): user pid=3614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199779261.800:1020): user pid=3614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199779261.800:1021): user pid=3614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199782861.814:1022): user pid=4856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199782861.815:1023): user pid=4856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199782861.815:1024): login pid=4856 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199782861.823:1025): user pid=4856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199782861.829:1026): user pid=4856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199782861.829:1027): user pid=4856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199786461.843:1028): user pid=5837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199786461.844:1029): user pid=5837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199786461.844:1030): login pid=5837 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199786461.851:1031): user pid=5837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199786461.856:1032): user pid=5837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199786461.856:1033): user pid=5837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199786521.863:1034): user pid=5856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199786521.863:1035): user pid=5856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199786521.863:1036): login pid=5856 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199786521.873:1037): user pid=5856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199787094.896:1038): user pid=5856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199787094.896:1039): user pid=5856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199790061.910:1040): user pid=9738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199790061.911:1041): user pid=9738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199790061.911:1042): login pid=9738 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199790061.919:1043): user pid=9738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199790061.924:1044): user pid=9738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199790061.924:1045): user pid=9738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199793661.938:1046): user pid=10747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199793661.939:1047): user pid=10747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199793661.939:1048): login pid=10747 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199793661.948:1049): user pid=10747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199793661.953:1050): user pid=10747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199793661.953:1051): user pid=10747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199797261.968:1052): user pid=12966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199797261.968:1053): user pid=12966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199797261.969:1054): login pid=12966 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199797261.977:1055): user pid=12966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199797261.981:1056): user pid=12966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199797261.982:1057): user pid=12966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199798101.990:1058): user pid=13200 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199798101.991:1059): user pid=13200 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199798101.991:1060): login pid=13200 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199798101.996:1061): user pid=13200 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199800862.244:1062): user pid=13957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199800862.281:1063): user pid=13957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199800862.281:1064): login pid=13957 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199800862.318:1065): user pid=13957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199800862.411:1066): user pid=13957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199800862.411:1067): user pid=13957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199804461.873:1068): user pid=14966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199804461.874:1069): user pid=14966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199804461.874:1070): login pid=14966 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199804461.880:1071): user pid=14966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199804461.885:1072): user pid=14966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199804461.885:1073): user pid=14966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199808061.907:1074): user pid=15967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199808061.908:1075): user pid=15967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199808061.908:1076): login pid=15967 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199808061.917:1077): user pid=15967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199808061.921:1078): user pid=15967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199808061.922:1079): user pid=15967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199811661.936:1080): user pid=16945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199811661.936:1081): user pid=16945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199811661.936:1082): login pid=16945 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199811661.941:1083): user pid=16945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199811661.946:1084): user pid=16945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199811661.946:1085): user pid=16945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199815261.959:1086): user pid=17920 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199815261.960:1087): user pid=17920 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199815261.960:1088): login pid=17920 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199815261.967:1089): user pid=17920 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199815261.972:1090): user pid=17920 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199815261.972:1091): user pid=17920 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199818861.985:1092): user pid=18905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199818861.986:1093): user pid=18905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199818861.986:1094): login pid=18905 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199818861.994:1095): user pid=18905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199818861.998:1096): user pid=18905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199818861.998:1097): user pid=18905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199822461.015:1098): user pid=19878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199822461.016:1099): user pid=19878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199822461.017:1100): login pid=19878 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199822461.023:1101): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199822461.058:1102): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199822461.058:1103): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199823297.557:1104): avc: denied { getattr } for pid=20123 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199823297.557:1104): arch=40000003 syscall=195 success=yes exit=0 a0=b9319fe8 a1=bffb3460 a2=5e1ff4 a3=b9319fe8 items=0 ppid=2463 pid=20123 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199823297.557:1105): avc: denied { read } for pid=20123 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199823297.557:1105): arch=40000003 syscall=5 success=yes exit=4 a0=b9319fe8 a1=8000 a2=1b6 a3=b9319158 items=0 ppid=2463 pid=20123 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1199823297.573:1106): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1199823297.578:1107): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1199823300.640:1108): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1199823300.644:1109): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1199823300.754:1110): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1199823300.756:1111): login pid=20123 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199823300.756:1112): user pid=20123 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1199823300.758:1113): user pid=20130 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1199823301.788:1114): user pid=20123 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1199823301.788:1115): user pid=20123 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=AVC msg=audit(1199823385.971:1116): avc: denied { getattr } for pid=20191 comm="sshd" path="/home/rick/.ssh/authorized_keys2" dev=dm-0 ino=16384002 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199823385.971:1116): arch=40000003 syscall=195 success=yes exit=0 a0=b9e19fe8 a1=bfa74f20 a2=5e1ff4 a3=b9e19fe8 items=0 ppid=2463 pid=20191 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199823385.972:1117): avc: denied { read } for pid=20191 comm="sshd" name="authorized_keys2" dev=dm-0 ino=16384002 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199823385.972:1117): arch=40000003 syscall=5 success=yes exit=4 a0=b9e19fe8 a1=8000 a2=1b6 a3=b9e19158 items=0 ppid=2463 pid=20191 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1199823385.972:1118): user pid=20191 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1199823385.977:1119): user pid=20191 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1199823388.949:1120): user pid=20191 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1199823388.954:1121): user pid=20191 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1199823388.963:1122): user pid=20191 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1199823388.964:1123): login pid=20191 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199823388.964:1124): user pid=20191 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1199823388.966:1125): user pid=20195 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1199823389.174:1126): user pid=20191 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1199823389.174:1127): user pid=20191 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1199823430.418:1128): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1199823430.422:1129): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1199823433.526:1130): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1199823433.530:1131): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1199823433.540:1132): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1199823433.541:1133): login pid=20251 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199823433.542:1134): user pid=20251 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1199823433.543:1135): user pid=20255 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1199823433.749:1136): user pid=20251 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1199823433.750:1137): user pid=20251 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1199826061.075:1138): user pid=21585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199826061.076:1139): user pid=21585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199826061.076:1140): login pid=21585 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199826061.085:1141): user pid=21585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199826061.093:1142): user pid=21585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199826061.093:1143): user pid=21585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199829661.127:1144): user pid=22575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199829661.128:1145): user pid=22575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199829661.128:1146): login pid=22575 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199829661.136:1147): user pid=22575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199829661.140:1148): user pid=22575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199829661.141:1149): user pid=22575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199831214.879:1150): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=23004 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199833261.155:1151): user pid=23729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199833261.156:1152): user pid=23729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199833261.156:1153): login pid=23729 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199833261.162:1154): user pid=23729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199833261.171:1155): user pid=23729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199833261.171:1156): user pid=23729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199836861.186:1157): user pid=24883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199836861.187:1158): user pid=24883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199836861.187:1159): login pid=24883 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199836861.194:1160): user pid=24883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199836861.200:1161): user pid=24883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199836861.200:1162): user pid=24883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199840461.213:1163): user pid=25865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199840461.214:1164): user pid=25865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199840461.214:1165): login pid=25865 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199840461.220:1166): user pid=25865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199840461.224:1167): user pid=25865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199840461.225:1168): user pid=25865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199844061.237:1169): user pid=26839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199844061.237:1170): user pid=26839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199844061.238:1171): login pid=26839 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199844061.247:1172): user pid=26839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199844061.252:1173): user pid=26839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199844061.252:1174): user pid=26839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199847582.835:1175): avc: denied { search } for pid=10195 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1199847582.835:1175): avc: denied { read } for pid=10195 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1199847582.835:1175): arch=40000003 syscall=195 success=yes exit=0 a0=b8ebfaf0 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10195 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199847582.879:1176): avc: denied { read } for pid=10195 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199847582.879:1176): arch=40000003 syscall=5 success=yes exit=17 a0=b8ebfe78 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10195 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199847582.897:1177): avc: denied { getattr } for pid=10195 comm="httpd" path="/home/rick/public_html/.htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199847582.897:1177): arch=40000003 syscall=197 success=yes exit=0 a0=11 a1=bfbf1adc a2=52bff4 a3=b8ebfea0 items=0 ppid=2632 pid=10195 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199847583.039:1178): avc: denied { getattr } for pid=10196 comm="httpd" path="/home/rick/public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1199847583.039:1178): arch=40000003 syscall=196 success=yes exit=0 a0=b8ec7458 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199847583.039:1179): avc: denied { getattr } for pid=10196 comm="httpd" path="/home/rick/public_html/photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1199847583.039:1179): arch=40000003 syscall=196 success=yes exit=0 a0=b8ec7458 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199847583.051:1180): avc: denied { read } for pid=10196 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1199847583.051:1180): arch=40000003 syscall=5 success=yes exit=17 a0=b8ebfb70 a1=98800 a2=52d120 a3=64 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199847586.588:1181): avc: denied { getattr } for pid=27823 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1199847586.588:1181): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb88 a1=bfbeeadc a2=52bff4 a3=171 items=0 ppid=2632 pid=27823 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199847597.306:1182): avc: denied { getattr } for pid=10196 comm="httpd" path="/home/rick/photos/101msdcf/2005/dsc00637.jpg" dev=dm-0 ino=23800866 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199847597.306:1182): arch=40000003 syscall=195 success=yes exit=0 a0=b8ec5ba8 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199847597.306:1183): avc: denied { read } for pid=10196 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199847597.306:1183): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec5f78 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1199847661.266:1184): user pid=27845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199847661.267:1185): user pid=27845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199847661.267:1186): login pid=27845 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199847661.273:1187): user pid=27845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199847661.277:1188): user pid=27845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199847661.277:1189): user pid=27845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199847724.068:1190): avc: denied { read } for pid=10199 comm="httpd" name="2005" dev=dm-0 ino=23791979 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1199847724.068:1190): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec7be8 a1=98800 a2=c5 a3=64 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_AUTH msg=audit(1199848392.805:1191): user pid=28061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199848392.805:1192): user pid=28061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199848392.903:1193): user pid=28061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1199848408.567:1194): user pid=28061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199851261.293:1195): user pid=29007 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199851261.294:1196): user pid=29007 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199851261.294:1197): login pid=29007 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199851261.303:1198): user pid=29007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199851261.308:1199): user pid=29007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199851261.308:1200): user pid=29007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199854861.322:1201): user pid=29978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199854861.323:1202): user pid=29978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199854861.323:1203): login pid=29978 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199854861.329:1204): user pid=29978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199854861.334:1205): user pid=29978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199854861.334:1206): user pid=29978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199858461.347:1207): user pid=30963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199858461.348:1208): user pid=30963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199858461.348:1209): login pid=30963 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199858461.357:1210): user pid=30963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199858461.362:1211): user pid=30963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199858461.362:1212): user pid=30963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199862061.375:1213): user pid=31938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199862061.376:1214): user pid=31938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199862061.376:1215): login pid=31938 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199862061.385:1216): user pid=31938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199862061.391:1217): user pid=31938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199862061.391:1218): user pid=31938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199865661.404:1219): user pid=1112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199865661.406:1220): user pid=1112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199865661.406:1221): login pid=1112 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199865661.414:1222): user pid=1112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199865661.418:1223): user pid=1112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199865661.418:1224): user pid=1112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199869261.432:1225): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199869261.433:1226): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199869261.433:1227): login pid=3187 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199869261.438:1228): user pid=3187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199869261.443:1229): user pid=3187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199869261.443:1230): user pid=3187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199872861.456:1231): user pid=4229 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199872861.457:1232): user pid=4229 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199872861.457:1233): login pid=4229 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199872861.466:1234): user pid=4229 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199872861.471:1235): user pid=4229 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199872861.471:1236): user pid=4229 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199872921.477:1237): user pid=4248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199872921.477:1238): user pid=4248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199872921.478:1239): login pid=4248 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199872921.483:1240): user pid=4248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199873517.508:1241): user pid=4248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199873517.509:1242): user pid=4248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199876461.522:1243): user pid=9640 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199876461.523:1244): user pid=9640 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199876461.523:1245): login pid=9640 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199876461.532:1246): user pid=9640 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199876461.537:1247): user pid=9640 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199876461.538:1248): user pid=9640 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199880061.551:1249): user pid=10626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199880061.551:1250): user pid=10626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199880061.551:1251): login pid=10626 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199880061.557:1252): user pid=10626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199880061.561:1253): user pid=10626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199880061.561:1254): user pid=10626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199883661.575:1255): user pid=11717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199883661.576:1256): user pid=11717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199883661.576:1257): login pid=11717 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199883661.584:1258): user pid=11717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199883661.589:1259): user pid=11717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199883661.590:1260): user pid=11717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199884501.598:1261): user pid=11953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199884501.599:1262): user pid=11953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199884501.599:1263): login pid=11953 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199884501.606:1264): user pid=11953 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199887261.089:1265): user pid=12723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199887261.117:1266): user pid=12723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199887261.117:1267): login pid=12723 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199887261.123:1268): user pid=12723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199887261.143:1269): user pid=12723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199887261.143:1270): user pid=12723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199890861.161:1271): user pid=13752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199890861.162:1272): user pid=13752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199890861.162:1273): login pid=13752 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199890861.168:1274): user pid=13752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199890861.177:1275): user pid=13752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199890861.178:1276): user pid=13752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199894461.191:1277): user pid=15905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199894461.191:1278): user pid=15905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199894461.191:1279): login pid=15905 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199894461.199:1280): user pid=15905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199894461.203:1281): user pid=15905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199894461.203:1282): user pid=15905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199898061.216:1283): user pid=16883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199898061.217:1284): user pid=16883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199898061.217:1285): login pid=16883 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199898061.225:1286): user pid=16883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199898061.230:1287): user pid=16883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199898061.230:1288): user pid=16883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199901661.243:1289): user pid=17858 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199901661.244:1290): user pid=17858 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199901661.244:1291): login pid=17858 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199901661.253:1292): user pid=17858 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199901661.257:1293): user pid=17858 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199901661.257:1294): user pid=17858 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199905261.272:1295): user pid=18878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199905261.272:1296): user pid=18878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199905261.272:1297): login pid=18878 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199905261.279:1298): user pid=18878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199905261.284:1299): user pid=18878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199905261.284:1300): user pid=18878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199908861.298:1301): user pid=19859 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199908861.299:1302): user pid=19859 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199908861.299:1303): login pid=19859 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199908861.305:1304): user pid=19859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199908861.310:1305): user pid=19859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199908861.311:1306): user pid=19859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199912461.325:1307): user pid=20845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199912461.325:1308): user pid=20845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199912461.325:1309): login pid=20845 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199912461.333:1310): user pid=20845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199912461.337:1311): user pid=20845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199912461.338:1312): user pid=20845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199916061.351:1313): user pid=21833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199916061.352:1314): user pid=21833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199916061.352:1315): login pid=21833 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199916061.359:1316): user pid=21833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199916061.364:1317): user pid=21833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199916061.365:1318): user pid=21833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199919661.378:1319): user pid=22822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199919661.378:1320): user pid=22822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199919661.379:1321): login pid=22822 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199919661.388:1322): user pid=22822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199919661.393:1323): user pid=22822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199919661.393:1324): user pid=22822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199923261.407:1325): user pid=23860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199923261.408:1326): user pid=23860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199923261.408:1327): login pid=23860 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199923261.416:1328): user pid=23860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199923261.421:1329): user pid=23860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199923261.422:1330): user pid=23860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199926861.435:1331): user pid=24853 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199926861.436:1332): user pid=24853 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199926861.436:1333): login pid=24853 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199926861.443:1334): user pid=24853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199926861.448:1335): user pid=24853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199926861.449:1336): user pid=24853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199930461.462:1337): user pid=25826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199930461.463:1338): user pid=25826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199930461.463:1339): login pid=25826 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199930461.470:1340): user pid=25826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199930461.475:1341): user pid=25826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199930461.475:1342): user pid=25826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199934061.488:1343): user pid=26810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199934061.489:1344): user pid=26810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199934061.489:1345): login pid=26810 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199934061.497:1346): user pid=26810 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199934061.501:1347): user pid=26810 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199934061.501:1348): user pid=26810 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199937661.515:1349): user pid=27832 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199937661.516:1350): user pid=27832 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199937661.516:1351): login pid=27832 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199937661.524:1352): user pid=27832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199937661.530:1353): user pid=27832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199937661.530:1354): user pid=27832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199941261.544:1355): user pid=28812 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199941261.545:1356): user pid=28812 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199941261.545:1357): login pid=28812 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199941261.553:1358): user pid=28812 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199941261.557:1359): user pid=28812 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199941261.558:1360): user pid=28812 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199944861.571:1361): user pid=29793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199944861.571:1362): user pid=29793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199944861.572:1363): login pid=29793 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199944861.579:1364): user pid=29793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199944861.584:1365): user pid=29793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199944861.584:1366): user pid=29793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199948461.597:1367): user pid=30775 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199948461.598:1368): user pid=30775 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199948461.598:1369): login pid=30775 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199948461.606:1370): user pid=30775 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199948461.611:1371): user pid=30775 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199948461.611:1372): user pid=30775 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199952061.624:1373): user pid=31744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199952061.624:1374): user pid=31744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199952061.625:1375): login pid=31744 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199952061.629:1376): user pid=31744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199952061.635:1377): user pid=31744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199952061.635:1378): user pid=31744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199955661.648:1379): user pid=32713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199955661.649:1380): user pid=32713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199955661.649:1381): login pid=32713 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199955661.657:1382): user pid=32713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199955661.662:1383): user pid=32713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199955661.662:1384): user pid=32713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199957888.946:1385): avc: denied { search } for pid=10201 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1199957888.946:1385): avc: denied { read } for pid=10201 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=AVC msg=audit(1199957888.946:1385): avc: denied { getattr } for pid=10201 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199957888.946:1385): arch=40000003 syscall=195 success=yes exit=0 a0=b8ebd910 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10201 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1199957888.946:1386): avc: denied { read } for pid=10201 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1199957888.946:1386): arch=40000003 syscall=5 success=yes exit=17 a0=b8ebdcb0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10201 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1199959261.676:1387): user pid=1346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199959261.677:1388): user pid=1346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199959261.678:1389): login pid=1346 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199959261.682:1390): user pid=1346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199959261.688:1391): user pid=1346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199959261.688:1392): user pid=1346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199959321.694:1393): user pid=1371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199959321.694:1394): user pid=1371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199959321.695:1395): login pid=1371 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199959321.703:1396): user pid=1371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199959817.352:1397): user pid=1371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199959817.353:1398): user pid=1371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199961252.525:1399): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2842 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199962861.366:1400): user pid=3312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199962861.367:1401): user pid=3312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199962861.367:1402): login pid=3312 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199962861.374:1403): user pid=3312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199962861.380:1404): user pid=3312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199962861.380:1405): user pid=3312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199966461.394:1406): user pid=4351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199966461.394:1407): user pid=4351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199966461.394:1408): login pid=4351 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199966461.401:1409): user pid=4351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199966461.406:1410): user pid=4351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199966461.406:1411): user pid=4351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199967239.138:1412): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4579 comm="f-spot" sig=6 >type=ANOM_ABEND msg=audit(1199969851.500:1413): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5322 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199970061.419:1414): user pid=5382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199970061.420:1415): user pid=5382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199970061.420:1416): login pid=5382 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199970061.429:1417): user pid=5382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199970061.433:1418): user pid=5382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199970061.434:1419): user pid=5382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199970901.442:1420): user pid=5615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199970901.443:1421): user pid=5615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199970901.443:1422): login pid=5615 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1199970901.452:1423): user pid=5615 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199973661.462:1424): user pid=6462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199973661.462:1425): user pid=6462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199973661.463:1426): login pid=6462 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199973661.471:1427): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199973661.499:1428): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199973661.499:1429): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199977261.513:1430): user pid=7440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199977261.514:1431): user pid=7440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199977261.514:1432): login pid=7440 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199977261.521:1433): user pid=7440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199977261.526:1434): user pid=7440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199977261.526:1435): user pid=7440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199980861.541:1436): user pid=9831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199980861.541:1437): user pid=9831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199980861.541:1438): login pid=9831 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199980861.548:1439): user pid=9831 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199980861.554:1440): user pid=9831 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199980861.554:1441): user pid=9831 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199982955.976:1442): user pid=10668 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1199982955.980:1443): user pid=10668 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_START msg=audit(1199982956.077:1444): user pid=10668 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_ACQ msg=audit(1199982956.088:1445): user pid=10668 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_DISP msg=audit(1199982958.961:1446): user pid=10668 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_END msg=audit(1199982958.961:1447): user pid=10668 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1199984461.569:1448): user pid=11202 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199984461.569:1449): user pid=11202 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199984461.570:1450): login pid=11202 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199984461.576:1451): user pid=11202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199984461.581:1452): user pid=11202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199984461.581:1453): user pid=11202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199988061.595:1454): user pid=12317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199988061.596:1455): user pid=12317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199988061.596:1456): login pid=12317 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199988061.604:1457): user pid=12317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199988061.609:1458): user pid=12317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199988061.610:1459): user pid=12317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199990919.661:1460): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13188 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199991661.625:1461): user pid=13389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199991661.626:1462): user pid=13389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199991661.626:1463): login pid=13389 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199991661.632:1464): user pid=13389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199991661.637:1465): user pid=13389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199991661.637:1466): user pid=13389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199994559.183:1467): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14173 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199995261.650:1468): user pid=14387 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199995261.651:1469): user pid=14387 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199995261.651:1470): login pid=14387 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199995261.657:1471): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199995261.662:1472): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199995261.662:1473): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199998427.896:1474): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=15261 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1199998861.674:1475): user pid=15379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199998861.675:1476): user pid=15379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199998861.675:1477): login pid=15379 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199998861.681:1478): user pid=15379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199998861.686:1479): user pid=15379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199998861.686:1480): user pid=15379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200002461.699:1481): user pid=16358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200002461.700:1482): user pid=16358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200002461.700:1483): login pid=16358 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200002461.707:1484): user pid=16358 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200002461.713:1485): user pid=16358 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200002461.713:1486): user pid=16358 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200006061.727:1487): user pid=17402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200006061.728:1488): user pid=17402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200006061.728:1489): login pid=17402 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200006061.734:1490): user pid=17402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200006061.738:1491): user pid=17402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200006061.738:1492): user pid=17402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200009661.752:1493): user pid=18432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200009661.753:1494): user pid=18432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200009661.753:1495): login pid=18432 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200009661.759:1496): user pid=18432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200009661.764:1497): user pid=18432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200009661.764:1498): user pid=18432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200013261.777:1499): user pid=19415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200013261.778:1500): user pid=19415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200013261.778:1501): login pid=19415 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200013261.784:1502): user pid=19415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200013261.789:1503): user pid=19415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200013261.789:1504): user pid=19415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200014317.647:1505): avc: denied { search } for pid=10194 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1200014317.647:1505): avc: denied { read } for pid=10194 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200014317.647:1505): arch=40000003 syscall=195 success=yes exit=0 a0=b8ec1af8 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10194 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200014317.647:1506): avc: denied { read } for pid=10194 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200014317.647:1506): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec1e80 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10194 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200014317.647:1507): avc: denied { getattr } for pid=10194 comm="httpd" path="/home/rick/public_html/.htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200014317.647:1507): arch=40000003 syscall=197 success=yes exit=0 a0=11 a1=bfbf1adc a2=52bff4 a3=b8ec1ea8 items=0 ppid=2632 pid=10194 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200014317.691:1508): avc: denied { getattr } for pid=10198 comm="httpd" path="/home/rick/public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200014317.691:1508): arch=40000003 syscall=196 success=yes exit=0 a0=b8ebd430 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200014317.691:1509): avc: denied { getattr } for pid=10198 comm="httpd" path="/home/rick/public_html/photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200014317.691:1509): arch=40000003 syscall=196 success=yes exit=0 a0=b8ebd430 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200014317.692:1510): avc: denied { read } for pid=10198 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1200014317.692:1510): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec3b80 a1=98800 a2=52d120 a3=64 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200014320.864:1511): avc: denied { getattr } for pid=10194 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1200014320.864:1511): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=10194 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200014324.011:1512): avc: denied { read } for pid=10199 comm="httpd" name="dsc01180.jpg" dev=dm-0 ino=23805488 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1200014324.011:1512): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec1c28 a1=8000 a2=0 a3=8000 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200016861.803:1513): user pid=20398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200016861.804:1514): user pid=20398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200016861.804:1515): login pid=20398 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200016861.811:1516): user pid=20398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200016861.816:1517): user pid=20398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200016861.816:1518): user pid=20398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200019031.880:1519): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20993 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200020461.830:1520): user pid=21376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200020461.830:1521): user pid=21376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200020461.831:1522): login pid=21376 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200020461.836:1523): user pid=21376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200020461.841:1524): user pid=21376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200020461.841:1525): user pid=21376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200024061.855:1526): user pid=22352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200024061.855:1527): user pid=22352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200024061.855:1528): login pid=22352 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200024061.861:1529): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200024061.866:1530): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200024061.867:1531): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200027661.880:1532): user pid=23332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200027661.880:1533): user pid=23332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200027661.881:1534): login pid=23332 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200027661.888:1535): user pid=23332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200027661.893:1536): user pid=23332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200027661.894:1537): user pid=23332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200028640.719:1538): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=23616 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200031261.907:1539): user pid=24322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200031261.907:1540): user pid=24322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200031261.908:1541): login pid=24322 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200031261.916:1542): user pid=24322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200031261.921:1543): user pid=24322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200031261.921:1544): user pid=24322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200034861.934:1545): user pid=25297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200034861.935:1546): user pid=25297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200034861.935:1547): login pid=25297 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200034861.944:1548): user pid=25297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200034861.949:1549): user pid=25297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200034861.949:1550): user pid=25297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200036229.224:1551): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=25671 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200038461.963:1552): user pid=26316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200038461.964:1553): user pid=26316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200038461.964:1554): login pid=26316 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200038461.973:1555): user pid=26316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200038461.978:1556): user pid=26316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200038461.978:1557): user pid=26316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200042061.991:1558): user pid=27285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200042061.992:1559): user pid=27285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200042061.992:1560): login pid=27285 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200042062.000:1561): user pid=27285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200042062.006:1562): user pid=27285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200042062.006:1563): user pid=27285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200045661.020:1564): user pid=28263 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200045661.020:1565): user pid=28263 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200045661.021:1566): login pid=28263 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200045661.029:1567): user pid=28263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200045661.034:1568): user pid=28263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200045661.034:1569): user pid=28263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200045721.041:1570): user pid=28285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200045721.042:1571): user pid=28285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200045721.042:1572): login pid=28285 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200045721.051:1573): user pid=28285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200046199.504:1574): user pid=28285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200046199.505:1575): user pid=28285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200049261.518:1576): user pid=29857 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200049261.519:1577): user pid=29857 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200049261.519:1578): login pid=29857 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200049261.526:1579): user pid=29857 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200049261.532:1580): user pid=29857 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200049261.532:1581): user pid=29857 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200052861.546:1582): user pid=30838 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200052861.546:1583): user pid=30838 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200052861.546:1584): login pid=30838 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200052861.555:1585): user pid=30838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200052861.559:1586): user pid=30838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200052861.559:1587): user pid=30838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200056461.573:1588): user pid=31824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200056461.573:1589): user pid=31824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200056461.574:1590): login pid=31824 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200056461.580:1591): user pid=31824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200056461.585:1592): user pid=31824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200056461.585:1593): user pid=31824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200057301.594:1594): user pid=32058 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200057301.594:1595): user pid=32058 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200057301.594:1596): login pid=32058 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200057301.601:1597): user pid=32058 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200060061.082:1598): user pid=348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200060061.101:1599): user pid=348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200060061.102:1600): login pid=348 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200060061.107:1601): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200060061.127:1602): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200060061.128:1603): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200063661.142:1604): user pid=1415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200063661.143:1605): user pid=1415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200063661.143:1606): login pid=1415 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200063661.150:1607): user pid=1415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200063661.157:1608): user pid=1415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200063661.157:1609): user pid=1415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200067261.171:1610): user pid=3842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200067261.171:1611): user pid=3842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200067261.172:1612): login pid=3842 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200067261.178:1613): user pid=3842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200067261.182:1614): user pid=3842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200067261.182:1615): user pid=3842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AVC msg=audit(1200067328.422:1616): user pid=2155 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1200067432.147:1617): avc: denied { search } for pid=10198 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1200067432.147:1617): avc: denied { read } for pid=10198 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200067432.147:1617): arch=40000003 syscall=195 success=yes exit=0 a0=b8ebdb00 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200067432.147:1618): avc: denied { read } for pid=10198 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200067432.147:1618): arch=40000003 syscall=5 success=yes exit=17 a0=b8ebde88 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200067432.147:1619): avc: denied { getattr } for pid=10198 comm="httpd" path="/home/rick/public_html/.htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200067432.147:1619): arch=40000003 syscall=197 success=yes exit=0 a0=11 a1=bfbf1adc a2=52bff4 a3=b8ebdeb0 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200067432.184:1620): avc: denied { getattr } for pid=10199 comm="httpd" path="/home/rick/public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200067432.184:1620): arch=40000003 syscall=196 success=yes exit=0 a0=b8ec5450 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200067432.184:1621): avc: denied { getattr } for pid=10199 comm="httpd" path="/home/rick/public_html/photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200067432.184:1621): arch=40000003 syscall=196 success=yes exit=0 a0=b8ec5450 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200067432.185:1622): avc: denied { read } for pid=10199 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1200067432.185:1622): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec1b90 a1=98800 a2=bfbefb18 a3=64 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_AVC msg=audit(1200067557.992:1623): user pid=2155 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1200067569.182:1624): avc: denied { read } for pid=10198 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200067569.182:1624): arch=40000003 syscall=195 success=yes exit=0 a0=b8ec7b50 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200067569.182:1625): avc: denied { read } for pid=10198 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200067569.182:1625): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec7ed0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200067569.182:1626): avc: denied { getattr } for pid=10198 comm="httpd" path="/home/rick/public_html/.htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200067569.182:1626): arch=40000003 syscall=197 success=yes exit=0 a0=11 a1=bfbf1adc a2=52bff4 a3=b8ec7ef8 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200067569.182:1627): avc: denied { getattr } for pid=10198 comm="httpd" path="/home/rick/public_html/photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200067569.182:1627): arch=40000003 syscall=196 success=yes exit=0 a0=b8ec54c8 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200067569.183:1628): avc: denied { read } for pid=10198 comm="httpd" name="101msdcf" dev=dm-0 ino=23791977 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1200067569.183:1628): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec7bd8 a1=98800 a2=bfbefb18 a3=64 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200067569.214:1629): avc: denied { getattr } for pid=10198 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200067569.214:1629): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200067569.214:1630): avc: denied { getattr } for pid=10198 comm="httpd" path="/home/rick/photos/101msdcf/dsc01180.jpg" dev=dm-0 ino=23805488 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1200067569.214:1630): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200067738.015:1631): avc: denied { read } for pid=10199 comm="httpd" name="m4v01187.thm" dev=dm-0 ino=57835549 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1200067738.015:1631): arch=40000003 syscall=5 success=yes exit=18 a0=b8ec73a0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1200070202.405:1632): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4710 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200070861.198:1633): user pid=4902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200070861.199:1634): user pid=4902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200070861.199:1635): login pid=4902 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200070861.206:1636): user pid=4902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200070861.212:1637): user pid=4902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200070861.213:1638): user pid=4902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200074461.227:1639): user pid=5955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200074461.228:1640): user pid=5955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200074461.228:1641): login pid=5955 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200074461.236:1642): user pid=5955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200074461.242:1643): user pid=5955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200074461.243:1644): user pid=5955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200078061.256:1645): user pid=7505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200078061.256:1646): user pid=7505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200078061.257:1647): login pid=7505 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200078061.262:1648): user pid=7505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200078061.267:1649): user pid=7505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200078061.267:1650): user pid=7505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200081661.286:1651): user pid=8495 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200081661.287:1652): user pid=8495 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200081661.287:1653): login pid=8495 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200081661.296:1654): user pid=8495 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200081661.301:1655): user pid=8495 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200081661.301:1656): user pid=8495 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200082626.221:1657): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8767 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200085261.316:1658): user pid=9551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200085261.317:1659): user pid=9551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200085261.317:1660): login pid=9551 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200085261.325:1661): user pid=9551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200085261.330:1662): user pid=9551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200085261.331:1663): user pid=9551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200086508.200:1664): user pid=10541 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1200086508.204:1665): user pid=10541 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1200086508.253:1666): user pid=10541 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1200086508.270:1667): user pid=10541 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1200086508.760:1668): user pid=10541 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1200086508.761:1669): user pid=10541 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1200088861.347:1670): user pid=11656 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200088861.348:1671): user pid=11656 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200088861.348:1672): login pid=11656 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200088861.357:1673): user pid=11656 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200088861.363:1674): user pid=11656 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200088861.363:1675): user pid=11656 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200090556.314:1676): avc: denied { read } for pid=10196 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1200090556.314:1676): arch=40000003 syscall=5 success=yes exit=17 a0=b8ebfb88 a1=98800 a2=bfbefb18 a3=64 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200090556.314:1677): avc: denied { getattr } for pid=10196 comm="httpd" path="/home/rick/photos/catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200090556.314:1677): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200090556.314:1678): avc: denied { read } for pid=10196 comm="httpd" name="catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200090556.314:1678): arch=40000003 syscall=5 success=yes exit=18 a0=b8ecd350 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200090559.885:1679): avc: denied { getattr } for pid=10200 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200090559.885:1679): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=10200 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200090559.885:1680): avc: denied { getattr } for pid=10200 comm="httpd" path="/home/rick/photos/101msdcf/dsc01180.jpg" dev=dm-0 ino=23805488 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1200090559.885:1680): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=10200 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200090598.909:1681): avc: denied { read } for pid=10199 comm="httpd" name="m4v01187.thm" dev=dm-0 ino=57835549 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1200090598.909:1681): arch=40000003 syscall=5 success=yes exit=18 a0=b8ed33e8 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200092461.377:1682): user pid=12675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200092461.378:1683): user pid=12675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200092461.378:1684): login pid=12675 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200092461.386:1685): user pid=12675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200092461.392:1686): user pid=12675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200092461.392:1687): user pid=12675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200092510.104:1688): avc: denied { search } for pid=12709 comm="smbd" name="home" dev=dm-0 ino=23166977 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1200092510.104:1688): avc: denied { getattr } for pid=12709 comm="smbd" path="/home/rick" dev=dm-0 ino=23265282 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1200092510.104:1688): arch=40000003 syscall=195 success=yes exit=0 a0=b869b2b0 a1=bfa62fe0 a2=4c7ff4 a3=bfa62fe0 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1200092510.120:1689): avc: denied { read } for pid=12709 comm="smbd" name="rick" dev=dm-0 ino=23265282 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1200092510.120:1689): arch=40000003 syscall=5 success=yes exit=25 a0=b8633170 a1=98800 a2=37bd9c a3=b8632998 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1200092510.135:1690): avc: denied { getattr } for pid=12709 comm="smbd" path="/home/rick/.randsig1.pl" dev=dm-0 ino=23266693 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200092510.135:1690): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1200092510.135:1691): avc: denied { getattr } for pid=12709 comm="smbd" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200092510.135:1691): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1200092510.135:1692): avc: denied { getattr } for pid=12709 comm="smbd" path="/home/rick/video.mpg" dev=dm-0 ino=23265285 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200092510.135:1692): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1200092510.137:1693): avc: denied { getattr } for pid=12709 comm="smbd" path="/home/rick/.mime.types" dev=dm-0 ino=8061162 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1200092510.137:1693): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1200092510.138:1694): avc: denied { read } for pid=12709 comm="smbd" name=".DCOPserver_dual.rkkda.com_:0" dev=dm-0 ino=23270712 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200092510.138:1694): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1200092510.142:1695): avc: denied { getattr } for pid=12709 comm="smbd" path="/home/rick/.tkcid" dev=dm-0 ino=23625733 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=SYSCALL msg=audit(1200092510.142:1695): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1200092510.145:1696): avc: denied { getattr } for pid=12709 comm="smbd" path="/home/rick/.Devhelp.rick" dev=dm-0 ino=23265283 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200092510.145:1696): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1200092510.146:1697): avc: denied { getattr } for pid=12709 comm="smbd" path="/home/rick/public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=dir >type=SYSCALL msg=audit(1200092510.146:1697): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200096061.408:1698): user pid=14121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200096061.408:1699): user pid=14121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200096061.409:1700): login pid=14121 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200096061.416:1701): user pid=14121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200096061.421:1702): user pid=14121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200096061.421:1703): user pid=14121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200096614.435:1704): user pid=14287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200096614.435:1705): user pid=14287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200096614.492:1706): user pid=14287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1200096696.381:1707): avc: denied { read write } for pid=14458 comm="rpc.mountd" name="control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200096696.381:1707): arch=40000003 syscall=5 success=yes exit=11 a0=bfc631a4 a1=8002 a2=0 a3=8002 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200096696.381:1708): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200096696.381:1708): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd00 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200096696.384:1709): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200096696.384:1709): arch=40000003 syscall=5 success=yes exit=13 a0=b80c51d0 a1=0 a2=0 a3=b80c5190 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200096696.384:1710): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200096696.384:1710): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bfc62df8 a3=d items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_END msg=audit(1200096712.419:1711): user pid=14287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200099661.437:1712): user pid=15610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200099661.438:1713): user pid=15610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200099661.439:1714): login pid=15610 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200099661.448:1715): user pid=15610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200099661.455:1716): user pid=15610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200099661.455:1717): user pid=15610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200103261.469:1718): user pid=16664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200103261.470:1719): user pid=16664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200103261.470:1720): login pid=16664 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200103261.476:1721): user pid=16664 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200103261.481:1722): user pid=16664 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200103261.481:1723): user pid=16664 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200106861.494:1724): user pid=17644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200106861.495:1725): user pid=17644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200106861.495:1726): login pid=17644 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200106861.503:1727): user pid=17644 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200106861.509:1728): user pid=17644 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200106861.509:1729): user pid=17644 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200110461.522:1730): user pid=18619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200110461.523:1731): user pid=18619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200110461.523:1732): login pid=18619 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200110461.531:1733): user pid=18619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200110461.536:1734): user pid=18619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200110461.536:1735): user pid=18619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200114061.549:1736): user pid=19596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200114061.550:1737): user pid=19596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200114061.550:1738): login pid=19596 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200114061.559:1739): user pid=19596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200114061.563:1740): user pid=19596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200114061.563:1741): user pid=19596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200115055.372:1742): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19870 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200117661.576:1743): user pid=20574 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200117661.577:1744): user pid=20574 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200117661.577:1745): login pid=20574 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200117661.582:1746): user pid=20574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200117661.587:1747): user pid=20574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200117661.587:1748): user pid=20574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200119689.319:1749): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=21122 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200121261.601:1750): user pid=21733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200121261.601:1751): user pid=21733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200121261.602:1752): login pid=21733 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200121261.608:1753): user pid=21733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200121261.613:1754): user pid=21733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200121261.614:1755): user pid=21733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200121752.456:1756): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=21872 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200124861.626:1757): user pid=22710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200124861.627:1758): user pid=22710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200124861.628:1759): login pid=22710 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200124861.634:1760): user pid=22710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200124861.639:1761): user pid=22710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200124861.639:1762): user pid=22710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200128461.652:1763): user pid=23686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200128461.653:1764): user pid=23686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200128461.653:1765): login pid=23686 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200128461.661:1766): user pid=23686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200128461.666:1767): user pid=23686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200128461.666:1768): user pid=23686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200132061.679:1769): user pid=24658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200132061.680:1770): user pid=24658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200132061.680:1771): login pid=24658 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200132061.686:1772): user pid=24658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200132061.691:1773): user pid=24658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200132061.691:1774): user pid=24658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200132121.697:1775): user pid=24678 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200132121.698:1776): user pid=24678 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200132121.698:1777): login pid=24678 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200132121.703:1778): user pid=24678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200132489.329:1779): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=24789 comm="f-spot" sig=6 >type=AVC msg=audit(1200132582.858:1780): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200132582.858:1780): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200132582.861:1781): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200132582.861:1781): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200132582.861:1782): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200132582.861:1782): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200132584.952:1783): avc: denied { getattr } for pid=2290 comm="setroubleshootd" name="control" dev=tmpfs ino=287 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200132584.952:1783): arch=40000003 syscall=229 success=yes exit=35 a0=8771de4 a1=474723 a2=90825b8 a3=ff items=0 ppid=1 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=CRED_DISP msg=audit(1200132670.403:1784): user pid=24678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200132670.404:1785): user pid=24678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200135661.419:1786): user pid=26597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200135661.419:1787): user pid=26597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200135661.420:1788): login pid=26597 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200135661.428:1789): user pid=26597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200135661.435:1790): user pid=26597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200135661.435:1791): user pid=26597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200136612.845:1792): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200136612.845:1792): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200136612.847:1793): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200136612.847:1793): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200136612.847:1794): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200136612.847:1794): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200139261.450:1795): user pid=27766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200139261.451:1796): user pid=27766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200139261.451:1797): login pid=27766 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200139261.461:1798): user pid=27766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200139261.467:1799): user pid=27766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200139261.468:1800): user pid=27766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200139878.827:1801): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=27947 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200142861.482:1802): user pid=28833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200142861.482:1803): user pid=28833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200142861.482:1804): login pid=28833 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200142861.491:1805): user pid=28833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200142861.496:1806): user pid=28833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200142861.496:1807): user pid=28833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200143701.504:1808): user pid=29064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200143701.505:1809): user pid=29064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200143701.505:1810): login pid=29064 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200143701.513:1811): user pid=29064 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200146461.403:1812): user pid=29822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200146461.422:1813): user pid=29822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200146461.422:1814): login pid=29822 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200146461.426:1815): user pid=29822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200146461.448:1816): user pid=29822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200146461.448:1817): user pid=29822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200150061.461:1818): user pid=30921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200150061.462:1819): user pid=30921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200150061.462:1820): login pid=30921 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200150061.469:1821): user pid=30921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200150061.474:1822): user pid=30921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200150061.475:1823): user pid=30921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200150867.306:1824): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=31272 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200153661.488:1825): user pid=32226 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200153661.489:1826): user pid=32226 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200153661.489:1827): login pid=32226 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200153661.496:1828): user pid=32226 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200153661.502:1829): user pid=32226 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200153661.502:1830): user pid=32226 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200155862.994:1831): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200155862.994:1831): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200155862.997:1832): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200155862.997:1832): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200155862.997:1833): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200155862.997:1833): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200157261.517:1834): user pid=896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200157261.518:1835): user pid=896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200157261.518:1836): login pid=896 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200157261.523:1837): user pid=896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200157261.530:1838): user pid=896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200157261.530:1839): user pid=896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200160861.545:1840): user pid=1911 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200160861.545:1841): user pid=1911 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200160861.545:1842): login pid=1911 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200160861.551:1843): user pid=1911 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200160861.556:1844): user pid=1911 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200160861.556:1845): user pid=1911 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200163134.678:1846): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200163134.678:1846): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200163134.680:1847): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200163134.680:1847): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200163134.680:1848): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200163134.680:1848): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1200164144.172:1849): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3341 comm="totem-video-thu" sig=11 >type=USER_ACCT msg=audit(1200164461.681:1850): user pid=3548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200164461.682:1851): user pid=3548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200164461.682:1852): login pid=3548 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200164461.690:1853): user pid=3548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200164461.727:1854): user pid=3548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200164461.727:1855): user pid=3548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200168061.826:1856): user pid=4635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200168061.827:1857): user pid=4635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200168061.827:1858): login pid=4635 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200168061.833:1859): user pid=4635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200168061.889:1860): user pid=4635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200168061.890:1861): user pid=4635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200169612.092:1862): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200169612.092:1862): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200169612.094:1863): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200169612.094:1863): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200169612.094:1864): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200169612.094:1864): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_AUTH msg=audit(1200170305.440:1865): user pid=5378 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1200170307.991:1866): user pid=5378 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1200170327.871:1867): user pid=5378 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ACCT msg=audit(1200171661.904:1868): user pid=5761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200171661.905:1869): user pid=5761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200171661.905:1870): login pid=5761 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200171661.914:1871): user pid=5761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200171661.918:1872): user pid=5761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200171661.919:1873): user pid=5761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200172454.755:1874): user pid=5992 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200172454.755:1875): user pid=5992 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200172454.800:1876): user pid=5992 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1200172741.233:1877): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2894 comm="hald" sig=11 >type=ANOM_ABEND msg=audit(1200172741.288:1878): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:hald_t:s0 pid=2944 comm="hald-addon-cpuf" sig=6 >type=AVC msg=audit(1200172897.021:1879): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200172897.021:1879): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200172897.024:1880): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200172897.024:1880): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200172897.024:1881): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200172897.024:1881): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_END msg=audit(1200172940.747:1882): user pid=5992 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200173251.023:1883): user pid=6244 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200173251.023:1884): user pid=6244 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200173251.037:1885): user pid=6244 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AVC msg=audit(1200173478.164:1886): user pid=2155 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1200173478.027:1887): policy loaded auid=500 >type=SYSCALL msg=audit(1200173478.027:1887): arch=40000003 syscall=4 success=yes exit=3994289 a0=4 a1=b7b1f000 a2=3cf2b1 a3=bf9a2478 items=0 ppid=6394 pid=6403 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_CHAUTHTOK msg=audit(1200173502.729:1888): user pid=6489 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=deleting user entries acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200173502.730:1889): user pid=6489 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=deleting group acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1200173504.437:1890): user pid=6492 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=delete SELinux user mapping acct="rpc" old-seuser=? old-role=? old-range=? new-seuser=? new-role=? new-range=? exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200173504.558:1891): user pid=6495 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=deleting group acct=rpc exe="/usr/sbin/groupdel" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200173504.563:1892): user pid=6496 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=rpc exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200173504.604:1893): user pid=6500 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=rpc exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ROLE_CHANGE msg=audit(1200173541.080:1894): user pid=6552 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1200173542.872:1895): user pid=6553 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1200173555.579:1896): user pid=6554 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1200173557.379:1897): user pid=6560 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1200173559.163:1898): user pid=6561 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1200173571.724:1899): user pid=6562 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ACCT msg=audit(1200175261.935:1900): user pid=7076 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200175261.935:1901): user pid=7076 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200175261.936:1902): login pid=7076 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200175261.945:1903): user pid=7076 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200175261.951:1904): user pid=7076 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200175261.951:1905): user pid=7076 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200176871.664:1906): user pid=6244 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200178861.965:1907): user pid=8065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200178861.966:1908): user pid=8065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200178861.966:1909): login pid=8065 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200178861.974:1910): user pid=8065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200178861.980:1911): user pid=8065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200178861.981:1912): user pid=8065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200182461.996:1913): user pid=9099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200182461.997:1914): user pid=9099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200182461.998:1915): login pid=9099 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200182462.003:1916): user pid=9099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200182462.007:1917): user pid=9099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200182462.008:1918): user pid=9099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200186061.021:1919): user pid=10088 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200186061.022:1920): user pid=10088 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200186061.022:1921): login pid=10088 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200186061.029:1922): user pid=10088 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200186061.035:1923): user pid=10088 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200186061.035:1924): user pid=10088 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200189661.048:1925): user pid=11069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200189661.049:1926): user pid=11069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200189661.049:1927): login pid=11069 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200189661.058:1928): user pid=11069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200189661.063:1929): user pid=11069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200189661.063:1930): user pid=11069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200193261.076:1931): user pid=12044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200193261.076:1932): user pid=12044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200193261.076:1933): login pid=12044 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200193261.084:1934): user pid=12044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200193261.089:1935): user pid=12044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200193261.089:1936): user pid=12044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200196861.103:1937): user pid=13069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200196861.103:1938): user pid=13069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200196861.103:1939): login pid=13069 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200196861.111:1940): user pid=13069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200196861.117:1941): user pid=13069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200196861.117:1942): user pid=13069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200197679.954:1943): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13298 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200200461.131:1944): user pid=14045 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200200461.131:1945): user pid=14045 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200200461.131:1946): login pid=14045 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200200461.139:1947): user pid=14045 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200200461.145:1948): user pid=14045 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200200461.145:1949): user pid=14045 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200204061.158:1950): user pid=15035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200204061.159:1951): user pid=15035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200204061.159:1952): login pid=15035 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200204061.167:1953): user pid=15035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200204061.173:1954): user pid=15035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200204061.173:1955): user pid=15035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200207661.187:1956): user pid=15885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200207661.187:1957): user pid=15885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200207661.187:1958): login pid=15885 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200207661.195:1959): user pid=15885 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200207661.201:1960): user pid=15885 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200207661.201:1961): user pid=15885 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200211261.215:1962): user pid=16860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200211261.215:1963): user pid=16860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200211261.215:1964): login pid=16860 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200211261.221:1965): user pid=16860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200211261.227:1966): user pid=16860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200211261.227:1967): user pid=16860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200214861.240:1968): user pid=17843 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200214861.241:1969): user pid=17843 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200214861.241:1970): login pid=17843 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200214861.250:1971): user pid=17843 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200214861.257:1972): user pid=17843 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200214861.257:1973): user pid=17843 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200218461.271:1974): user pid=18825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200218461.271:1975): user pid=18825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200218461.272:1976): login pid=18825 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200218461.277:1977): user pid=18825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200218461.282:1978): user pid=18825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200218461.282:1979): user pid=18825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200218521.289:1980): user pid=18841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200218521.290:1981): user pid=18841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200218521.290:1982): login pid=18841 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200218521.297:1983): user pid=18841 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200218993.567:1984): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200218993.567:1984): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200218993.570:1985): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200218993.570:1985): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200218993.570:1986): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200218993.570:1986): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=CRED_DISP msg=audit(1200219235.632:1987): user pid=18841 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200219235.633:1988): user pid=18841 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200219721.642:1989): user pid=26329 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200219721.643:1990): user pid=26329 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200219721.643:1991): login pid=26329 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200219721.652:1992): user pid=26329 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200220410.042:1993): user pid=26329 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200220410.043:1994): user pid=26329 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200222061.053:1995): user pid=32084 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200222061.054:1996): user pid=32084 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200222061.054:1997): login pid=32084 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200222061.063:1998): user pid=32084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200222061.069:1999): user pid=32084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200222061.069:2000): user pid=32084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200225661.083:2001): user pid=607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200225661.084:2002): user pid=607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200225661.084:2003): login pid=607 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200225661.093:2004): user pid=607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200225661.098:2005): user pid=607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200225661.098:2006): user pid=607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200229261.112:2007): user pid=1589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200229261.112:2008): user pid=1589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200229261.112:2009): login pid=1589 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200229261.118:2010): user pid=1589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200229261.123:2011): user pid=1589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200229261.123:2012): user pid=1589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200230101.131:2013): user pid=1826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200230101.132:2014): user pid=1826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200230101.132:2015): login pid=1826 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200230101.138:2016): user pid=1826 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200232736.312:2017): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2634 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200232861.545:2018): user pid=2732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200232861.567:2019): user pid=2732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200232861.567:2020): login pid=2732 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200232861.572:2021): user pid=2732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200232861.620:2022): user pid=2732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200232861.620:2023): user pid=2732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200236461.654:2024): user pid=3785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200236461.654:2025): user pid=3785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200236461.655:2026): login pid=3785 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200236461.663:2027): user pid=3785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200236461.668:2028): user pid=3785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200236461.669:2029): user pid=3785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200240061.683:2030): user pid=5523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200240061.683:2031): user pid=5523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200240061.684:2032): login pid=5523 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200240061.690:2033): user pid=5523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200240061.695:2034): user pid=5523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200240061.695:2035): user pid=5523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200243661.708:2036): user pid=7868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200243661.709:2037): user pid=7868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200243661.709:2038): login pid=7868 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200243661.717:2039): user pid=7868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200243661.722:2040): user pid=7868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200243661.722:2041): user pid=7868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200247261.735:2042): user pid=8847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200247261.735:2043): user pid=8847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200247261.736:2044): login pid=8847 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200247261.741:2045): user pid=8847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200247261.746:2046): user pid=8847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200247261.746:2047): user pid=8847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200250861.760:2048): user pid=9824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200250861.760:2049): user pid=9824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200250861.760:2050): login pid=9824 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200250861.767:2051): user pid=9824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200250861.772:2052): user pid=9824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200250861.772:2053): user pid=9824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200254461.786:2054): user pid=10815 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200254461.787:2055): user pid=10815 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200254461.787:2056): login pid=10815 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200254461.794:2057): user pid=10815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200254461.798:2058): user pid=10815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200254461.798:2059): user pid=10815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200257971.845:2060): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200257971.845:2060): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200257971.847:2061): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200257971.847:2061): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200257971.847:2062): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200257971.847:2062): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200257975.271:2063): avc: denied { read } for pid=19466 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1200257975.271:2063): arch=40000003 syscall=5 success=yes exit=17 a0=b8f91c80 a1=98800 a2=52d120 a3=64 items=0 ppid=2632 pid=19466 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200257975.271:2064): avc: denied { getattr } for pid=19466 comm="httpd" path="/home/rick/photos/catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200257975.271:2064): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19466 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200257975.272:2065): avc: denied { read } for pid=19466 comm="httpd" name="catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200257975.272:2065): arch=40000003 syscall=5 success=yes exit=18 a0=b8f9f460 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=19466 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200257977.445:2066): avc: denied { getattr } for pid=19466 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200257977.445:2066): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19466 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200257977.446:2067): avc: denied { getattr } for pid=19466 comm="httpd" path="/home/rick/photos/101msdcf/dsc01180.jpg" dev=dm-0 ino=23805488 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1200257977.446:2067): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19466 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200257980.734:2068): avc: denied { read } for pid=19468 comm="httpd" name="dsc01180.jpg" dev=dm-0 ino=23805488 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1200257980.734:2068): arch=40000003 syscall=5 success=yes exit=17 a0=b8f93d38 a1=8000 a2=0 a3=8000 items=0 ppid=2632 pid=19468 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200258061.814:2069): user pid=11909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200258061.815:2070): user pid=11909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200258061.815:2071): login pid=11909 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200258061.821:2072): user pid=11909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200258061.827:2073): user pid=11909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200258061.827:2074): user pid=11909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200261661.841:2075): user pid=12894 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200261661.841:2076): user pid=12894 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200261661.841:2077): login pid=12894 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200261661.849:2078): user pid=12894 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200261661.854:2079): user pid=12894 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200261661.854:2080): user pid=12894 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200265261.869:2081): user pid=13926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200265261.869:2082): user pid=13926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200265261.870:2083): login pid=13926 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200265261.876:2084): user pid=13926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200265261.880:2085): user pid=13926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200265261.880:2086): user pid=13926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200265674.279:2087): user pid=14045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200265674.279:2088): user pid=14045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200265674.378:2089): user pid=14045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200265687.939:2090): user pid=14045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200265698.822:2091): user pid=14061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200265698.823:2092): user pid=14061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200265698.832:2093): user pid=14061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200265713.287:2094): user pid=14061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1200267047.676:2095): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200267047.676:2095): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200267047.678:2096): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200267047.678:2096): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200267047.678:2097): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200267047.678:2097): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200268861.898:2098): user pid=15044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200268861.899:2099): user pid=15044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200268861.899:2100): login pid=15044 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200268861.909:2101): user pid=15044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200268861.914:2102): user pid=15044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200268861.915:2103): user pid=15044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200272462.159:2104): user pid=16156 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200272462.191:2105): user pid=16156 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200272462.191:2106): login pid=16156 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200272462.245:2107): user pid=16156 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200272462.330:2108): user pid=16156 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200272462.330:2109): user pid=16156 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200275738.513:2110): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200275738.513:2110): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200275738.515:2111): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200275738.515:2111): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200275738.515:2112): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200275738.515:2112): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200276061.454:2113): user pid=17172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200276061.477:2114): user pid=17172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200276061.477:2115): login pid=17172 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200276061.506:2116): user pid=17172 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200276061.553:2117): user pid=17172 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200276061.554:2118): user pid=17172 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200279547.284:2119): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18159 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200279661.813:2120): user pid=18188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200279661.845:2121): user pid=18188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200279661.846:2122): login pid=18188 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200279661.878:2123): user pid=18188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200279661.984:2124): user pid=18188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200279661.984:2125): user pid=18188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200280519.494:2126): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18426 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200283261.347:2127): user pid=19168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200283261.396:2128): user pid=19168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200283261.396:2129): login pid=19168 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200283261.450:2130): user pid=19168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200283261.613:2131): user pid=19168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200283261.614:2132): user pid=19168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200286861.864:2133): user pid=20147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200286861.864:2134): user pid=20147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200286861.865:2135): login pid=20147 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200286862.009:2136): user pid=20147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200286862.064:2137): user pid=20147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200286862.065:2138): user pid=20147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200290461.671:2139): user pid=21153 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200290461.717:2140): user pid=21153 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200290461.717:2141): login pid=21153 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200290461.790:2142): user pid=21153 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200290462.015:2143): user pid=21153 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200290462.016:2144): user pid=21153 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200294061.304:2145): user pid=22133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200294061.330:2146): user pid=22133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200294061.330:2147): login pid=22133 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200294061.375:2148): user pid=22133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200294061.480:2149): user pid=22133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200294061.480:2150): user pid=22133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200297661.625:2151): user pid=23111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200297661.648:2152): user pid=23111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200297661.649:2153): login pid=23111 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200297661.677:2154): user pid=23111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200297661.731:2155): user pid=23111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200297661.731:2156): user pid=23111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200301261.878:2157): user pid=24089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200301261.910:2158): user pid=24089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200301261.910:2159): login pid=24089 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200301261.939:2160): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200301261.992:2161): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200301261.992:2162): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200301917.005:2163): user pid=24277 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200301917.005:2164): user pid=24277 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200301917.147:2165): user pid=24277 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200301995.302:2166): user pid=24277 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200303035.242:2167): user pid=24606 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200304861.116:2168): user pid=25104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200304861.117:2169): user pid=25104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200304861.117:2170): login pid=25104 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200304861.143:2171): user pid=25104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200304861.150:2172): user pid=25104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200304861.150:2173): user pid=25104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200304921.157:2174): user pid=25119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200304921.179:2175): user pid=25119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200304921.179:2176): login pid=25119 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200304921.185:2177): user pid=25119 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200305386.328:2178): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200305386.328:2178): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200305386.331:2179): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200305386.331:2179): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200305386.331:2180): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200305386.331:2180): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=CRED_DISP msg=audit(1200305472.521:2181): user pid=25119 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200305472.522:2182): user pid=25119 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200308461.553:2183): user pid=26867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200308461.578:2184): user pid=26867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200308461.578:2185): login pid=26867 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200308461.582:2186): user pid=26867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200308461.605:2187): user pid=26867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200308461.606:2188): user pid=26867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200312061.669:2189): user pid=27844 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200312061.669:2190): user pid=27844 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200312061.670:2191): login pid=27844 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200312061.679:2192): user pid=27844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200312061.706:2193): user pid=27844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200312061.707:2194): user pid=27844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200312741.176:2195): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200312741.176:2195): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200312741.179:2196): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200312741.179:2196): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200312741.179:2197): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200312741.179:2197): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1200314523.838:2198): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28599 comm="f-spot" sig=6 >type=AVC msg=audit(1200314756.040:2199): avc: denied { getattr } for pid=19469 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200314756.040:2199): arch=40000003 syscall=195 success=yes exit=0 a0=b8f95a38 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=19469 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200314756.145:2200): avc: denied { read } for pid=19469 comm="httpd" name="index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200314756.145:2200): arch=40000003 syscall=5 success=yes exit=17 a0=b8f95ae0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=19469 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1200315523.616:2201): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28877 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200315661.947:2202): user pid=28916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200315661.948:2203): user pid=28916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200315661.948:2204): login pid=28916 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200315661.995:2205): user pid=28916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200315662.085:2206): user pid=28916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200315662.085:2207): user pid=28916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200319261.312:2208): user pid=29936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200319261.313:2209): user pid=29936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200319261.313:2210): login pid=29936 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200319261.356:2211): user pid=29936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200319261.457:2212): user pid=29936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200319261.458:2213): user pid=29936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200322861.622:2214): user pid=31246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200322861.623:2215): user pid=31246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200322861.623:2216): login pid=31246 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200322861.659:2217): user pid=31246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200322861.684:2218): user pid=31246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200322861.685:2219): user pid=31246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200326461.774:2220): user pid=721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200326461.775:2221): user pid=721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200326461.775:2222): login pid=721 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200326461.785:2223): user pid=721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200326461.834:2224): user pid=721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200326461.834:2225): user pid=721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200330062.142:2226): user pid=2209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200330062.142:2227): user pid=2209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200330062.143:2228): login pid=2209 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200330062.150:2229): user pid=2209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200330062.229:2230): user pid=2209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200330062.229:2231): user pid=2209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200331130.465:2232): avc: denied { search } for pid=2531 comm="CID.cgi" name=".tkcid" dev=dm-0 ino=23625733 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1200331130.465:2232): avc: denied { read } for pid=2531 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200331130.465:2232): arch=40000003 syscall=5 success=yes exit=3 a0=8c7ac18 a1=8000 a2=0 a3=8000 items=0 ppid=19470 pid=2531 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1200331130.465:2233): avc: denied { ioctl } for pid=2531 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200331130.465:2233): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bf801d48 a3=bf801d88 items=0 ppid=19470 pid=2531 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1200331130.465:2234): avc: denied { getattr } for pid=2531 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200331130.465:2234): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=8c5e068 a2=776ff4 a3=8c74818 items=0 ppid=19470 pid=2531 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=USER_ACCT msg=audit(1200333661.243:2235): user pid=3342 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200333661.244:2236): user pid=3342 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200333661.244:2237): login pid=3342 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200333661.252:2238): user pid=3342 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200333661.256:2239): user pid=3342 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200333661.257:2240): user pid=3342 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200334647.351:2241): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200334647.351:2241): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200334647.353:2242): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200334647.353:2242): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200334647.353:2243): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200334647.353:2243): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200337261.271:2244): user pid=4398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200337261.271:2245): user pid=4398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200337261.271:2246): login pid=4398 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200337261.276:2247): user pid=4398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200337261.282:2248): user pid=4398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200337261.282:2249): user pid=4398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200340861.295:2250): user pid=5381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200340861.296:2251): user pid=5381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200340861.296:2252): login pid=5381 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200340861.301:2253): user pid=5381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200340861.306:2254): user pid=5381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200340861.306:2255): user pid=5381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200344461.340:2256): user pid=6443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200344461.340:2257): user pid=6443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200344461.341:2258): login pid=6443 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200344461.349:2259): user pid=6443 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200344461.356:2260): user pid=6443 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200344461.356:2261): user pid=6443 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200348061.371:2262): user pid=7533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200348061.372:2263): user pid=7533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200348061.372:2264): login pid=7533 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200348061.381:2265): user pid=7533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200348061.386:2266): user pid=7533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200348061.386:2267): user pid=7533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200351156.569:2268): avc: denied { read } for pid=19465 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1200351156.569:2268): arch=40000003 syscall=5 success=yes exit=17 a0=b8f9ecb0 a1=98800 a2=52d120 a3=64 items=0 ppid=2632 pid=19465 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200351156.570:2269): avc: denied { getattr } for pid=19465 comm="httpd" path="/home/rick/photos/catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200351156.570:2269): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19465 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200351156.570:2270): avc: denied { read } for pid=19465 comm="httpd" name="catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200351156.570:2270): arch=40000003 syscall=5 success=yes exit=18 a0=b8f9a430 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=19465 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200351176.911:2271): avc: denied { getattr } for pid=19468 comm="httpd" path="/home/rick/photos/101mnv01/m4v01187.thm" dev=dm-0 ino=57835549 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1200351176.911:2271): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19468 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200351176.912:2272): avc: denied { read } for pid=19468 comm="httpd" name="m4v01187.thm" dev=dm-0 ino=57835549 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1200351176.912:2272): arch=40000003 syscall=5 success=yes exit=18 a0=b8f9f4e0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=19468 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200351185.870:2273): avc: denied { getattr } for pid=19470 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200351185.870:2273): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19470 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200351661.400:2274): user pid=8506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200351661.401:2275): user pid=8506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200351661.401:2276): login pid=8506 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200351661.408:2277): user pid=8506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200351661.413:2278): user pid=8506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200351661.414:2279): user pid=8506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200354461.619:2280): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200354461.619:2280): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200354461.621:2281): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200354461.621:2281): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200354461.621:2282): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200354461.621:2282): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200355261.427:2283): user pid=9491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200355261.428:2284): user pid=9491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200355261.428:2285): login pid=9491 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200355261.435:2286): user pid=9491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200355261.440:2287): user pid=9491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200355261.440:2288): user pid=9491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200358861.453:2289): user pid=10468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200358861.454:2290): user pid=10468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200358861.454:2291): login pid=10468 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200358861.461:2292): user pid=10468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200358861.466:2293): user pid=10468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200358861.466:2294): user pid=10468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_LOGIN msg=audit(1200361502.586:2295): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1200361502.587:2296): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200361505.720:2297): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200361505.724:2298): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200361505.791:2299): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1200361505.793:2300): login pid=11200 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200361505.793:2301): user pid=11200 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200361505.794:2302): user pid=11206 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200361506.385:2303): user pid=11200 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1200361506.386:2304): user pid=11200 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200362461.481:2305): user pid=11517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200362461.482:2306): user pid=11517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200362461.482:2307): login pid=11517 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200362461.490:2308): user pid=11517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200362461.497:2309): user pid=11517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200362461.497:2310): user pid=11517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200363929.571:2311): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=11929 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200366061.511:2312): user pid=12506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200366061.512:2313): user pid=12506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200366061.512:2314): login pid=12506 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200366061.521:2315): user pid=12506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200366061.527:2316): user pid=12506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200366061.528:2317): user pid=12506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200368760.414:2318): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13259 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200369661.541:2319): user pid=13504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200369661.542:2320): user pid=13504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200369661.542:2321): login pid=13504 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200369661.548:2322): user pid=13504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200369661.553:2323): user pid=13504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200369661.554:2324): user pid=13504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200372744.379:2325): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200372744.379:2325): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200372744.381:2326): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200372744.381:2326): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200372744.381:2327): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200372744.381:2327): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200373261.567:2328): user pid=14492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200373261.568:2329): user pid=14492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200373261.568:2330): login pid=14492 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200373261.575:2331): user pid=14492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200373261.580:2332): user pid=14492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200373261.580:2333): user pid=14492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200376861.595:2334): user pid=15702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200376861.595:2335): user pid=15702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200376861.595:2336): login pid=15702 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200376861.601:2337): user pid=15702 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200376861.606:2338): user pid=15702 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200376861.607:2339): user pid=15702 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200380461.620:2340): user pid=16672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200380461.620:2341): user pid=16672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200380461.621:2342): login pid=16672 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200380461.629:2343): user pid=16672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200380461.634:2344): user pid=16672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200380461.634:2345): user pid=16672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200384061.648:2346): user pid=17638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200384061.648:2347): user pid=17638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200384061.648:2348): login pid=17638 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200384061.656:2349): user pid=17638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200384061.661:2350): user pid=17638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200384061.661:2351): user pid=17638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200387661.674:2352): user pid=18611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200387661.675:2353): user pid=18611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200387661.675:2354): login pid=18611 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200387661.683:2355): user pid=18611 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200387661.688:2356): user pid=18611 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200387661.688:2357): user pid=18611 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200390191.839:2358): user pid=19303 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200391261.716:2359): user pid=19610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200391261.717:2360): user pid=19610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200391261.717:2361): login pid=19610 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200391261.723:2362): user pid=19610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200391261.729:2363): user pid=19610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200391261.729:2364): user pid=19610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200391321.736:2365): user pid=19628 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200391321.737:2366): user pid=19628 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200391321.737:2367): login pid=19628 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200391321.745:2368): user pid=19628 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200391773.302:2369): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200391773.302:2369): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200391773.305:2370): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200391773.305:2370): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200391773.305:2371): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200391773.305:2371): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=CRED_DISP msg=audit(1200391813.083:2372): user pid=19628 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200391813.083:2373): user pid=19628 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200394861.097:2374): user pid=21211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200394861.098:2375): user pid=21211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200394861.098:2376): login pid=21211 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200394861.107:2377): user pid=21211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200394861.129:2378): user pid=21211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200394861.129:2379): user pid=21211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200398461.143:2380): user pid=22194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200398461.143:2381): user pid=22194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200398461.144:2382): login pid=22194 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200398461.151:2383): user pid=22194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200398461.156:2384): user pid=22194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200398461.156:2385): user pid=22194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200402061.168:2386): user pid=23188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200402061.169:2387): user pid=23188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200402061.169:2388): login pid=23188 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200402061.172:2389): user pid=23188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200402061.177:2390): user pid=23188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200402061.177:2391): user pid=23188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200402901.185:2392): user pid=23419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200402901.185:2393): user pid=23419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200402901.185:2394): login pid=23419 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200402901.192:2395): user pid=23419 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200405661.219:2396): user pid=24182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200405661.240:2397): user pid=24182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200405661.240:2398): login pid=24182 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200405661.271:2399): user pid=24182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200405661.309:2400): user pid=24182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200405661.310:2401): user pid=24182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200406907.214:2402): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200406907.214:2402): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200406907.216:2403): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200406907.216:2403): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200406907.216:2404): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200406907.216:2404): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200409261.479:2405): user pid=25330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200409261.480:2406): user pid=25330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200409261.480:2407): login pid=25330 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200409261.531:2408): user pid=25330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200409261.570:2409): user pid=25330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200409261.570:2410): user pid=25330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200412053.073:2411): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200412053.073:2411): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200412053.075:2412): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200412053.075:2412): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200412053.075:2413): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200412053.075:2413): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200412861.832:2414): user pid=26845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200412861.863:2415): user pid=26845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200412861.864:2416): login pid=26845 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200412861.892:2417): user pid=26845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200412861.991:2418): user pid=26845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200412861.991:2419): user pid=26845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200416461.162:2420): user pid=27828 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200416461.162:2421): user pid=27828 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200416461.162:2422): login pid=27828 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200416461.206:2423): user pid=27828 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200416461.245:2424): user pid=27828 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200416461.245:2425): user pid=27828 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200420061.462:2426): user pid=28807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200420061.463:2427): user pid=28807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200420061.463:2428): login pid=28807 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200420061.525:2429): user pid=28807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200420061.580:2430): user pid=28807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200420061.580:2431): user pid=28807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200422360.509:2432): user pid=29436 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200422360.509:2433): user pid=29436 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200422360.793:2434): user pid=29436 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200422482.718:2435): user pid=29436 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200423661.725:2436): user pid=29811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200423661.726:2437): user pid=29811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200423661.726:2438): login pid=29811 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200423661.739:2439): user pid=29811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200423661.794:2440): user pid=29811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200423661.794:2441): user pid=29811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200427261.996:2442): user pid=30818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200427261.996:2443): user pid=30818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200427261.997:2444): login pid=30818 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200427262.045:2445): user pid=30818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200427262.133:2446): user pid=30818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200427262.133:2447): user pid=30818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200428690.699:2448): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200428690.699:2448): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200428690.701:2449): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200428690.701:2449): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200428690.701:2450): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200428690.701:2450): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200430861.322:2451): user pid=31798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200430861.323:2452): user pid=31798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200430861.323:2453): login pid=31798 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200430861.375:2454): user pid=31798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200430861.414:2455): user pid=31798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200430861.414:2456): user pid=31798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200434461.657:2457): user pid=650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200434461.658:2458): user pid=650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200434461.658:2459): login pid=650 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200434461.730:2460): user pid=650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200434461.826:2461): user pid=650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200434461.826:2462): user pid=650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200435409.763:2463): user pid=1050 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200435409.763:2464): user pid=1050 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200435409.855:2465): user pid=1050 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200435435.689:2466): user pid=1050 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200435498.596:2467): user pid=1172 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200435498.596:2468): user pid=1172 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200435498.605:2469): user pid=1172 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200435551.150:2470): user pid=1172 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200436175.924:2471): user pid=1368 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200436175.924:2472): user pid=1368 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200436175.935:2473): user pid=1368 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200436220.525:2474): user pid=1368 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1200436252.858:2475): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200436252.858:2475): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200436252.861:2476): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200436252.861:2476): arch=40000003 syscall=5 success=yes exit=12 a0=b80c28f0 a1=0 a2=0 a3=b80c28b0 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200436252.861:2477): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200436252.861:2477): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200437365.796:2478): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200437365.796:2478): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200437365.799:2479): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200437365.799:2479): arch=40000003 syscall=5 success=yes exit=12 a0=b80c28f0 a1=0 a2=0 a3=b80c28b0 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200437365.799:2480): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200437365.799:2480): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200438061.843:2481): user pid=2169 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200438061.844:2482): user pid=2169 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200438061.844:2483): login pid=2169 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200438061.852:2484): user pid=2169 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200438061.858:2485): user pid=2169 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200438061.858:2486): user pid=2169 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200438152.296:2487): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2200 comm="f-spot" sig=6 >type=USER_AUTH msg=audit(1200439823.846:2488): user pid=2747 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1200439823.850:2489): user pid=2747 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_START msg=audit(1200439823.861:2490): user pid=2747 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_ACQ msg=audit(1200439823.871:2491): user pid=2747 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_DISP msg=audit(1200439834.524:2492): user pid=2747 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_END msg=audit(1200439834.524:2493): user pid=2747 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_AUTH msg=audit(1200439873.087:2494): user pid=2772 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1200439873.090:2495): user pid=2772 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_START msg=audit(1200439873.100:2496): user pid=2772 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_ACQ msg=audit(1200439873.100:2497): user pid=2772 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_DISP msg=audit(1200439876.924:2498): user pid=2772 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_END msg=audit(1200439876.924:2499): user pid=2772 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1200441661.873:2500): user pid=3295 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200441661.874:2501): user pid=3295 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200441661.874:2502): login pid=3295 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200441661.883:2503): user pid=3295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200441661.888:2504): user pid=3295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200441661.888:2505): user pid=3295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200441934.119:2506): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3399 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200445261.902:2507): user pid=4317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200445261.902:2508): user pid=4317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200445261.902:2509): login pid=4317 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200445261.911:2510): user pid=4317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200445261.916:2511): user pid=4317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200445261.916:2512): user pid=4317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200448438.727:2513): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200448438.727:2513): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200448438.730:2514): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200448438.730:2514): arch=40000003 syscall=5 success=yes exit=12 a0=b80c28f0 a1=0 a2=0 a3=b80c28b0 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200448438.730:2515): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200448438.730:2515): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200448861.930:2516): user pid=5276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200448861.930:2517): user pid=5276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200448861.930:2518): login pid=5276 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200448861.938:2519): user pid=5276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200448861.943:2520): user pid=5276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200448861.943:2521): user pid=5276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200452462.117:2522): user pid=6232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200452462.117:2523): user pid=6232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200452462.117:2524): login pid=6232 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200452462.168:2525): user pid=6232 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200452462.230:2526): user pid=6232 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200452462.231:2527): user pid=6232 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200456061.559:2528): user pid=7175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200456061.591:2529): user pid=7175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200456061.592:2530): login pid=7175 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200456061.637:2531): user pid=7175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200456061.759:2532): user pid=7175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200456061.759:2533): user pid=7175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200459661.968:2534): user pid=8121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200459661.969:2535): user pid=8121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200459661.969:2536): login pid=8121 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200459662.030:2537): user pid=8121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200459662.085:2538): user pid=8121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200459662.086:2539): user pid=8121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200463257.733:2540): user pid=9066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200463257.733:2541): user pid=9066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200463257.897:2542): user pid=9066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200463261.188:2543): user pid=9078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200463261.189:2544): user pid=9078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200463261.189:2545): login pid=9078 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200463261.219:2546): user pid=9078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200463261.275:2547): user pid=9078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200463261.275:2548): user pid=9078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200464758.552:2549): user pid=9066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_LOGIN msg=audit(1200464997.362:2550): user pid=9993 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1200464997.367:2551): user pid=9993 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200465001.186:2552): user pid=9993 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200465001.212:2553): user pid=9993 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200465001.292:2554): user pid=9993 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1200465001.295:2555): login pid=9993 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200465001.295:2556): user pid=9993 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200465001.296:2557): user pid=10002 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200465002.010:2558): user pid=9993 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1200465002.011:2559): user pid=9993 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=AVC msg=audit(1200465611.696:2560): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200465611.696:2560): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200465611.699:2561): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200465611.699:2561): arch=40000003 syscall=5 success=yes exit=12 a0=b80c28f0 a1=0 a2=0 a3=b80c28b0 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200465611.699:2562): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200465611.699:2562): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200466861.396:2563): user pid=15179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200466861.397:2564): user pid=15179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200466861.397:2565): login pid=15179 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200466861.416:2566): user pid=15179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200466861.553:2567): user pid=15179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200466861.553:2568): user pid=15179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200470461.705:2569): user pid=16161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200470461.706:2570): user pid=16161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200470461.706:2571): login pid=16161 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200470461.749:2572): user pid=16161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200470461.831:2573): user pid=16161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200470461.832:2574): user pid=16161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200474061.967:2575): user pid=17130 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200474061.968:2576): user pid=17130 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200474061.968:2577): login pid=17130 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200474062.030:2578): user pid=17130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200474062.087:2579): user pid=17130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200474062.087:2580): user pid=17130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200477661.339:2581): user pid=18099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200477661.340:2582): user pid=18099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200477661.340:2583): login pid=18099 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200477661.402:2584): user pid=18099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200477661.453:2585): user pid=18099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200477661.453:2586): user pid=18099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200477721.460:2587): user pid=18117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200477721.460:2588): user pid=18117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200477721.460:2589): login pid=18117 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200477721.469:2590): user pid=18117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200478189.835:2591): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200478189.835:2591): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200478189.837:2592): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200478189.837:2592): arch=40000003 syscall=5 success=yes exit=12 a0=b80c28f0 a1=0 a2=0 a3=b80c28b0 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200478189.837:2593): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200478189.837:2593): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=CRED_DISP msg=audit(1200478360.598:2594): user pid=18117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200478360.599:2595): user pid=18117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200481261.838:2596): user pid=21028 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200481261.839:2597): user pid=21028 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200481261.839:2598): login pid=21028 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200481261.890:2599): user pid=21028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200481261.983:2600): user pid=21028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200481261.983:2601): user pid=21028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200482442.647:2602): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200482442.647:2602): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200482442.658:2603): avc: denied { read } for pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200482442.658:2603): arch=40000003 syscall=5 success=yes exit=12 a0=b80c28f0 a1=0 a2=0 a3=b80c28b0 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200482442.658:2604): avc: denied { ioctl } for pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200482442.658:2604): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_AUTH msg=audit(1200484442.355:2605): user pid=21918 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200484442.355:2606): user pid=21918 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200484442.541:2607): user pid=21918 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1200484512.587:2608): avc: denied { read write } for pid=22095 comm="rpc.mountd" name="control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200484512.587:2608): arch=40000003 syscall=5 success=yes exit=9 a0=bfefa2a4 a1=8002 a2=0 a3=8002 items=0 ppid=1 pid=22095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200484512.587:2609): avc: denied { ioctl } for pid=22095 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200484512.587:2609): arch=40000003 syscall=54 success=yes exit=0 a0=9 a1=c134fd00 a2=b8b76270 a3=2cbb00 items=0 ppid=1 pid=22095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200484512.590:2610): avc: denied { read } for pid=22095 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200484512.590:2610): arch=40000003 syscall=5 success=yes exit=11 a0=b8b73e28 a1=0 a2=0 a3=b8b76270 items=0 ppid=1 pid=22095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200484512.590:2611): avc: denied { ioctl } for pid=22095 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200484512.590:2611): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=80041272 a2=bfef9ef8 a3=b items=0 ppid=1 pid=22095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200484861.115:2612): user pid=22274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200484861.116:2613): user pid=22274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200484861.116:2614): login pid=22274 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200484861.123:2615): user pid=22274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200484861.158:2616): user pid=22274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200484861.159:2617): user pid=22274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200485289.122:2618): user pid=21918 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200485307.524:2619): user pid=22431 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200485307.524:2620): user pid=22431 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200485307.543:2621): user pid=22431 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200485407.983:2622): user pid=22431 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200485961.286:2623): user pid=22771 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200485961.286:2624): user pid=22771 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200485961.296:2625): user pid=22771 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200486010.073:2626): user pid=22771 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200488461.307:2627): user pid=23489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200488461.308:2628): user pid=23489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200488461.308:2629): login pid=23489 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200488461.351:2630): user pid=23489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200488461.431:2631): user pid=23489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200488461.431:2632): user pid=23489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200489301.440:2633): user pid=23720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200489301.440:2634): user pid=23720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200489301.440:2635): login pid=23720 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200489301.447:2636): user pid=23720 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200492061.837:2637): user pid=24480 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200492061.869:2638): user pid=24480 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200492061.869:2639): login pid=24480 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200492061.907:2640): user pid=24480 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200492062.066:2641): user pid=24480 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200492062.066:2642): user pid=24480 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200495661.584:2643): user pid=25572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200495661.584:2644): user pid=25572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200495661.584:2645): login pid=25572 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200495661.609:2646): user pid=25572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200495661.663:2647): user pid=25572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200495661.663:2648): user pid=25572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200495699.719:2649): avc: denied { read write } for pid=22581 comm="rpc.mountd" name="control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200495699.719:2649): arch=40000003 syscall=5 success=yes exit=10 a0=bfa7b064 a1=8002 a2=0 a3=8002 items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200495699.719:2650): avc: denied { ioctl } for pid=22581 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200495699.719:2650): arch=40000003 syscall=54 success=yes exit=0 a0=a a1=c134fd00 a2=b8c12ab8 a3=2cbb00 items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200495699.737:2651): avc: denied { read } for pid=22581 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200495699.737:2651): arch=40000003 syscall=5 success=yes exit=13 a0=b8c0f3f0 a1=0 a2=0 a3=b8c0f3b0 items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200495699.737:2652): avc: denied { ioctl } for pid=22581 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200495699.737:2652): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bfa7acb8 a3=d items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200495699.845:2653): avc: denied { ioctl } for pid=22581 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200495699.845:2653): arch=40000003 syscall=54 success=yes exit=0 a0=a a1=c134fd02 a2=b8c12ab8 a3=2cbb00 items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200495699.874:2654): avc: denied { read } for pid=22581 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200495699.874:2654): arch=40000003 syscall=5 success=yes exit=13 a0=b8c10d28 a1=0 a2=0 a3=b8c0d500 items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200495699.874:2655): avc: denied { ioctl } for pid=22581 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200495699.874:2655): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bfa7acb8 a3=d items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_AUTH msg=audit(1200496808.873:2656): user pid=25982 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200496808.873:2657): user pid=25982 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200496808.921:2658): user pid=25982 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200496821.933:2659): user pid=25982 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200499260.766:2660): user pid=26858 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ACCT msg=audit(1200499261.759:2661): user pid=26864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200499261.760:2662): user pid=26864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200499261.760:2663): login pid=26864 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200499261.767:2664): user pid=26864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200499261.803:2665): user pid=26864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200499261.803:2666): user pid=26864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200499757.436:2667): avc: denied { write } for pid=27013 comm="rpc.statd" path="pipe:[5099692]" dev=pipefs ino=5099692 scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:system_r:automount_t:s0 tclass=fifo_file >type=SYSCALL msg=audit(1200499757.436:2667): arch=40000003 syscall=11 success=yes exit=0 a0=9e554a0 a1=9e55340 a2=9e554c8 a3=9e55340 items=0 ppid=27012 pid=27013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=system_u:system_r:rpcd_t:s0 key=(null) >type=AVC msg=audit(1200499757.438:2668): avc: denied { unlink } for pid=27014 comm="rpc.statd" name="rpc.statd.pid" dev=dm-0 ino=56230336 scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file >type=SYSCALL msg=audit(1200499757.438:2668): arch=40000003 syscall=10 success=yes exit=0 a0=b7f96c67 a1=0 a2=b7f99730 a3=b7f91f70 items=0 ppid=27013 pid=27014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=system_u:system_r:rpcd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200502861.823:2669): user pid=29158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200502861.828:2670): user pid=29158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200502861.829:2671): login pid=29158 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200502861.834:2672): user pid=29158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200502861.876:2673): user pid=29158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200502861.877:2674): user pid=29158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200504037.293:2675): avc: denied { read write } for pid=26794 comm="rpc.mountd" name="control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200504037.293:2675): arch=40000003 syscall=5 success=yes exit=11 a0=bf9f88f4 a1=8002 a2=0 a3=8002 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200504037.293:2676): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200504037.293:2676): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd00 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200504037.296:2677): avc: denied { read } for pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200504037.296:2677): arch=40000003 syscall=5 success=yes exit=13 a0=b9905c98 a1=0 a2=0 a3=b9905c58 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200504037.296:2678): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200504037.296:2678): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200506461.997:2679): user pid=30485 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200506462.029:2680): user pid=30485 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200506462.029:2681): login pid=30485 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200506462.057:2682): user pid=30485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200506462.088:2683): user pid=30485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200506462.089:2684): user pid=30485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200510061.103:2685): user pid=31481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200510061.104:2686): user pid=31481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200510061.104:2687): login pid=31481 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200510061.110:2688): user pid=31481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200510061.116:2689): user pid=31481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200510061.116:2690): user pid=31481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200510758.040:2691): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200510758.040:2691): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200510758.043:2692): avc: denied { read } for pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200510758.043:2692): arch=40000003 syscall=5 success=yes exit=13 a0=b9903b48 a1=0 a2=0 a3=b9903b08 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200510758.043:2693): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200510758.043:2693): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1200512301.937:2694): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=32417 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200513661.164:2695): user pid=315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200513661.165:2696): user pid=315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200513661.165:2697): login pid=315 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200513661.172:2698): user pid=315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200513661.179:2699): user pid=315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200513661.179:2700): user pid=315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200517261.212:2701): user pid=1440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200517261.212:2702): user pid=1440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200517261.213:2703): login pid=1440 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200517261.218:2704): user pid=1440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200517261.244:2705): user pid=1440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200517261.244:2706): user pid=1440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200518610.072:2707): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200518610.072:2707): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200518610.075:2708): avc: denied { read } for pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200518610.075:2708): arch=40000003 syscall=5 success=yes exit=13 a0=b9903b48 a1=0 a2=0 a3=b9903b08 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200518610.075:2709): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200518610.075:2709): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200520861.298:2710): user pid=3571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200520861.299:2711): user pid=3571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200520861.299:2712): login pid=3571 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200520861.317:2713): user pid=3571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200520861.323:2714): user pid=3571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200520861.323:2715): user pid=3571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200523820.088:2716): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200523820.088:2716): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200524461.338:2717): user pid=5438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200524461.339:2718): user pid=5438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200524461.339:2719): login pid=5438 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200524461.345:2720): user pid=5438 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200524461.351:2721): user pid=5438 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200524461.351:2722): user pid=5438 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200524726.084:2723): avc: denied { read } for pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200524726.084:2723): arch=40000003 syscall=5 success=yes exit=13 a0=b9905c58 a1=0 a2=0 a3=b9903be8 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200524726.084:2724): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200524726.084:2724): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200528061.366:2725): user pid=6457 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200528061.366:2726): user pid=6457 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200528061.367:2727): login pid=6457 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200528061.375:2728): user pid=6457 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200528061.380:2729): user pid=6457 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200528061.380:2730): user pid=6457 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200531661.394:2731): user pid=7429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200531661.394:2732): user pid=7429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200531661.395:2733): login pid=7429 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200531661.401:2734): user pid=7429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200531661.406:2735): user pid=7429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200531661.406:2736): user pid=7429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200535261.420:2737): user pid=8402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200535261.421:2738): user pid=8402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200535261.421:2739): login pid=8402 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200535261.429:2740): user pid=8402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200535261.434:2741): user pid=8402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200535261.435:2742): user pid=8402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200538861.448:2743): user pid=9371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200538861.449:2744): user pid=9371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200538861.449:2745): login pid=9371 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200538861.457:2746): user pid=9371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200538861.462:2747): user pid=9371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200538861.462:2748): user pid=9371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200542461.497:2749): user pid=10669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200542461.497:2750): user pid=10669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200542461.498:2751): login pid=10669 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200542461.503:2752): user pid=10669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200542461.508:2753): user pid=10669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200542461.509:2754): user pid=10669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_LOGIN msg=audit(1200542563.118:2755): user pid=10699 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1200542563.123:2756): user pid=10699 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200542566.502:2757): user pid=10699 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200542566.505:2758): user pid=10699 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200542566.599:2759): user pid=10699 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1200542566.600:2760): login pid=10699 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200542566.600:2761): user pid=10699 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200542566.602:2762): user pid=10703 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200542566.906:2763): user pid=10699 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1200542566.907:2764): user pid=10699 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=AVC msg=audit(1200542846.054:2765): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200542846.054:2765): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200542846.057:2766): avc: denied { read } for pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200542846.057:2766): arch=40000003 syscall=5 success=yes exit=13 a0=b9905c58 a1=0 a2=0 a3=b9903be8 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200542846.057:2767): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200542846.057:2767): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_LOGIN msg=audit(1200543101.043:2768): user pid=15539 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1200543101.048:2769): user pid=15539 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200543104.838:2770): user pid=15539 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200543104.842:2771): user pid=15539 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200543104.854:2772): user pid=15539 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1200543104.856:2773): login pid=15539 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200543104.856:2774): user pid=15539 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200543104.857:2775): user pid=15547 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200543104.930:2776): user pid=15539 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1200543104.931:2777): user pid=15539 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=AVC msg=audit(1200543148.321:2778): avc: denied { read } for pid=26794 comm="rpc.mountd" name="root" dev=tmpfs ino=325 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200543148.321:2778): arch=40000003 syscall=5 success=yes exit=12 a0=b9904830 a1=0 a2=ffffffff a3=b99047f0 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200543451.482:2779): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200543451.482:2779): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1200544717.407:2780): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16061 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200546061.525:2781): user pid=16421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200546061.526:2782): user pid=16421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200546061.526:2783): login pid=16421 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200546061.536:2784): user pid=16421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200546061.542:2785): user pid=16421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200546061.542:2786): user pid=16421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200547780.071:2787): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16888 comm="f-spot" sig=6 >type=USER_AUTH msg=audit(1200549404.673:2788): user pid=17458 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200549404.775:2789): user pid=17458 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200549404.928:2790): user pid=17458 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)' >type=LOGIN msg=audit(1200549404.930:2791): login pid=17458 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200549404.997:2792): user pid=17458 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200549405.098:2793): user pid=17466 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200549405.277:2794): user pid=17458 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)' >type=USER_END msg=audit(1200549405.396:2795): user pid=17458 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)' >type=AVC msg=audit(1200549530.766:2796): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200549530.766:2796): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200549530.768:2797): avc: denied { read } for pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200549530.768:2797): arch=40000003 syscall=5 success=yes exit=13 a0=b9905c58 a1=0 a2=0 a3=b9903be8 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200549530.768:2798): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200549530.768:2798): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200549661.558:2799): user pid=17594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200549661.558:2800): user pid=17594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200549661.558:2801): login pid=17594 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200549661.568:2802): user pid=17594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200549661.574:2803): user pid=17594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200549661.575:2804): user pid=17594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200553261.588:2805): user pid=18577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200553261.589:2806): user pid=18577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200553261.589:2807): login pid=18577 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200553261.598:2808): user pid=18577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200553261.602:2809): user pid=18577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200553261.603:2810): user pid=18577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200556861.615:2811): user pid=19556 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200556861.616:2812): user pid=19556 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200556861.616:2813): login pid=19556 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200556861.622:2814): user pid=19556 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200556861.626:2815): user pid=19556 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200556861.626:2816): user pid=19556 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200560461.640:2817): user pid=20520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200560461.640:2818): user pid=20520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200560461.640:2819): login pid=20520 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200560461.646:2820): user pid=20520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200560461.650:2821): user pid=20520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200560461.651:2822): user pid=20520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200564061.665:2823): user pid=21513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200564061.666:2824): user pid=21513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200564061.666:2825): login pid=21513 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200564061.674:2826): user pid=21513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200564061.679:2827): user pid=21513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200564061.679:2828): user pid=21513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200564121.686:2829): user pid=21532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200564121.687:2830): user pid=21532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200564121.687:2831): login pid=21532 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200564121.695:2832): user pid=21532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200564637.283:2833): user pid=21532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200564637.284:2834): user pid=21532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200564698.488:2835): user pid=25480 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200564698.488:2836): user pid=25480 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200564698.549:2837): user pid=25480 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1200564730.795:2838): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200564730.795:2838): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200564730.797:2839): avc: denied { read } for pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200564730.797:2839): arch=40000003 syscall=5 success=yes exit=13 a0=b9905c58 a1=0 a2=0 a3=b9903be8 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=AVC msg=audit(1200564730.797:2840): avc: denied { ioctl } for pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1200564730.797:2840): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=USER_AVC msg=audit(1200564833.566:2841): user pid=2155 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1200564833.276:2842): policy loaded auid=500 >type=SYSCALL msg=audit(1200564833.276:2842): arch=40000003 syscall=4 success=yes exit=3997229 a0=4 a1=b7b7d000 a2=3cfe2d a3=bf848ff8 items=0 ppid=8284 pid=8299 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_CHAUTHTOK msg=audit(1200564863.105:2843): user pid=8357 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200564863.139:2844): user pid=8358 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200564863.142:2845): user pid=8359 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200564863.144:2846): user pid=8360 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1200564894.179:2847): user pid=8400 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1200564896.140:2848): user pid=8401 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ACCT msg=audit(1200564901.272:2849): user pid=8403 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ROLE_CHANGE msg=audit(1200564909.593:2850): user pid=8402 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1200564911.549:2851): user pid=8413 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1200564913.453:2852): user pid=8414 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1200564926.757:2853): user pid=8415 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_END msg=audit(1200564943.649:2854): user pid=25480 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200564992.565:2855): user pid=8465 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200565085.850:2856): avc: denied { read } for pid=8518 comm="cvs" name="config" dev=dm-0 ino=23200189 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200565085.850:2856): arch=40000003 syscall=5 success=yes exit=3 a0=9780640 a1=8000 a2=1b6 a3=9780b60 items=0 ppid=2473 pid=8518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200565085.867:2857): avc: denied { getattr } for pid=8518 comm="cvs" path="/home/cvs/CVSROOT/config" dev=dm-0 ino=23200189 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200565085.867:2857): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=bfc20b2c a2=776ff4 a3=9780b60 items=0 ppid=2473 pid=8518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1200565085.885:2858): user pid=8518 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200565085.888:2859): user pid=8518 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1200565085.922:2860): avc: denied { read } for pid=8518 comm="cvs" name="CVSROOT" dev=dm-0 ino=23199751 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1200565085.922:2860): arch=40000003 syscall=33 success=yes exit=0 a0=97846a0 a1=5 a2=97846a0 a3=978060d items=0 ppid=2473 pid=8518 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200565085.988:2861): avc: denied { write } for pid=8522 comm="cvs" name="giantmap" dev=dm-0 ino=23200675 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1200565085.988:2861): avc: denied { add_name } for pid=8522 comm="cvs" name="#cvs.lock" scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1200565085.988:2861): avc: denied { create } for pid=8522 comm="cvs" name="#cvs.lock" scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1200565085.988:2861): arch=40000003 syscall=39 success=yes exit=0 a0=9796670 a1=1ff a2=0 a3=9796670 items=0 ppid=8518 pid=8522 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200565086.020:2862): avc: denied { create } for pid=8522 comm="cvs" name="#cvs.rfl.dual.rkkda.com.8522" scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=AVC msg=audit(1200565086.020:2862): avc: denied { write } for pid=8522 comm="cvs" name="#cvs.rfl.dual.rkkda.com.8522" dev=dm-0 ino=28508162 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200565086.020:2862): arch=40000003 syscall=5 success=yes exit=4 a0=97966a0 a1=8242 a2=1b6 a3=97966e0 items=0 ppid=8518 pid=8522 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200565086.032:2863): avc: denied { remove_name } for pid=8522 comm="cvs" name="#cvs.lock" dev=dm-0 ino=40534042 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1200565086.032:2863): avc: denied { rmdir } for pid=8522 comm="cvs" name="#cvs.lock" dev=dm-0 ino=40534042 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1200565086.032:2863): arch=40000003 syscall=40 success=yes exit=0 a0=9796670 a1=0 a2=80dccd4 a3=97848c0 items=0 ppid=8518 pid=8522 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200565086.051:2864): avc: denied { unlink } for pid=8522 comm="cvs" name="#cvs.rfl.dual.rkkda.com.8522" dev=dm-0 ino=28508162 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200565086.051:2864): arch=40000003 syscall=10 success=yes exit=0 a0=9796f38 a1=0 a2=9796f38 a3=80dccd4 items=0 ppid=8518 pid=8522 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1200565092.591:2865): user pid=8535 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200565092.594:2866): user pid=8535 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200565114.051:2867): user pid=8547 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200565114.054:2868): user pid=8547 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200565135.691:2869): user pid=8563 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200565135.694:2870): user pid=8563 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200565158.016:2871): user pid=8583 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200565158.019:2872): user pid=8583 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1200565162.482:2873): avc: denied { setattr } for pid=8589 comm="cvs" name=",giantmap," dev=dm-0 ino=28508198 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200565162.482:2873): arch=40000003 syscall=94 success=yes exit=0 a0=4 a1=816d a2=865ae5a a3=865ae5b items=0 ppid=8583 pid=8589 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200565162.491:2874): avc: denied { rename } for pid=8589 comm="cvs" name=",giantmap," dev=dm-0 ino=28508198 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200565162.491:2874): arch=40000003 syscall=38 success=yes exit=0 a0=865f658 a1=865ae40 a2=865ae40 a3=865f658 items=0 ppid=8583 pid=8589 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200565162.520:2875): avc: denied { append } for pid=8589 comm="cvs" name="history" dev=dm-0 ino=23200195 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200565162.520:2875): arch=40000003 syscall=5 success=yes exit=3 a0=865b138 a1=8401 a2=0 a3=8401 items=0 ppid=8583 pid=8589 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null) >type=ANOM_ABEND msg=audit(1200566185.810:2876): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=23091 comm="f-spot" sig=6 >type=ANOM_ABEND msg=audit(1200567072.569:2877): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5335 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200567661.335:2878): user pid=19723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200567661.335:2879): user pid=19723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200567661.336:2880): login pid=19723 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200567661.341:2881): user pid=19723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200567661.370:2882): user pid=19723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200567661.370:2883): user pid=19723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200568801.380:2884): user pid=21105 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200568801.380:2885): user pid=21105 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200568801.381:2886): login pid=21105 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200568801.387:2887): user pid=21105 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200569401.158:2888): user pid=25082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200569401.159:2889): user pid=25082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200569401.159:2890): login pid=25082 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200569401.165:2891): user pid=25082 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200571261.173:2892): user pid=26345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200571261.174:2893): user pid=26345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200571261.174:2894): login pid=26345 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200571261.182:2895): user pid=26345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200571261.187:2896): user pid=26345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200571261.187:2897): user pid=26345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200572350.139:2898): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26647 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200574861.202:2899): user pid=27382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200574861.203:2900): user pid=27382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200574861.203:2901): login pid=27382 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200574861.211:2902): user pid=27382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200574861.216:2903): user pid=27382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200574861.216:2904): user pid=27382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200575701.225:2905): user pid=27616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200575701.225:2906): user pid=27616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200575701.225:2907): login pid=27616 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200575701.232:2908): user pid=27616 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200578461.656:2909): user pid=28398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200578461.677:2910): user pid=28398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200578461.677:2911): login pid=28398 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200578461.699:2912): user pid=28398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200578461.722:2913): user pid=28398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200578461.722:2914): user pid=28398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200582061.736:2915): user pid=29451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200582061.736:2916): user pid=29451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200582061.736:2917): login pid=29451 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200582061.743:2918): user pid=29451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200582061.748:2919): user pid=29451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200582061.748:2920): user pid=29451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_LOGIN msg=audit(1200582322.412:2921): user pid=29545 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1200582322.416:2922): user pid=29545 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200582325.621:2923): user pid=29545 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200582325.626:2924): user pid=29545 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200582325.659:2925): user pid=29545 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1200582325.660:2926): login pid=29545 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200582325.660:2927): user pid=29545 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200582325.662:2928): user pid=29552 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200582326.190:2929): user pid=29545 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1200582326.191:2930): user pid=29545 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1200582343.554:2931): user pid=29592 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1200582343.559:2932): user pid=29592 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200582346.646:2933): user pid=29592 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200582346.651:2934): user pid=29592 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200582346.658:2935): user pid=29592 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1200582346.660:2936): login pid=29592 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200582346.660:2937): user pid=29592 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200582346.661:2938): user pid=29596 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200582346.747:2939): user pid=29592 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1200582346.748:2940): user pid=29592 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1200582383.659:2941): user pid=29644 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1200582383.663:2942): user pid=29644 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200582386.590:2943): user pid=29644 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200582386.594:2944): user pid=29644 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200582386.601:2945): user pid=29644 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1200582386.602:2946): login pid=29644 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200582386.602:2947): user pid=29644 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200582386.604:2948): user pid=29651 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200582386.675:2949): user pid=29644 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1200582386.675:2950): user pid=29644 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1200582407.991:2951): user pid=29691 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1200582407.996:2952): user pid=29691 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200582411.535:2953): user pid=29691 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200582411.539:2954): user pid=29691 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200582411.546:2955): user pid=29691 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1200582411.547:2956): login pid=29691 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200582411.547:2957): user pid=29691 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200582411.549:2958): user pid=29696 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200582411.629:2959): user pid=29691 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1200582411.630:2960): user pid=29691 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1200582595.865:2961): user pid=29788 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1200582595.870:2962): user pid=29788 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200582599.095:2963): user pid=29788 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200582599.098:2964): user pid=29788 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200582599.104:2965): user pid=29788 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1200582599.105:2966): login pid=29788 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200582599.105:2967): user pid=29788 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200582599.106:2968): user pid=29792 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200582599.191:2969): user pid=29788 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1200582599.191:2970): user pid=29788 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1200582934.842:2971): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1200582934.847:2972): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200582940.059:2973): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=failed)' >type=USER_LOGIN msg=audit(1200582940.059:2974): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200582943.417:2975): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200582943.421:2976): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200582943.431:2977): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1200582943.433:2978): login pid=29945 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200582943.433:2979): user pid=29945 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200582943.434:2980): user pid=29953 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200582943.518:2981): user pid=29945 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1200582943.518:2982): user pid=29945 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1200583146.167:2983): user pid=30048 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1200583146.171:2984): user pid=30048 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200583148.881:2985): user pid=30048 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200583148.885:2986): user pid=30048 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200583148.894:2987): user pid=30048 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1200583148.895:2988): login pid=30048 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200583148.895:2989): user pid=30048 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200583148.897:2990): user pid=30052 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200583148.972:2991): user pid=30048 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1200583148.972:2992): user pid=30048 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1200583242.567:2993): user pid=30111 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1200583242.572:2994): user pid=30111 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1200583245.746:2995): user pid=30111 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200583245.750:2996): user pid=30111 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1200583245.757:2997): user pid=30111 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1200583245.758:2998): login pid=30111 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200583245.758:2999): user pid=30111 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1200583245.759:3000): user pid=30115 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1200583245.836:3001): user pid=30111 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1200583245.836:3002): user pid=30111 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1200585661.765:3003): user pid=30874 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200585661.766:3004): user pid=30874 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200585661.766:3005): login pid=30874 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200585661.774:3006): user pid=30874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200585661.781:3007): user pid=30874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200585661.781:3008): user pid=30874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200587087.164:3009): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=31711 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200589261.797:3010): user pid=32301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200589261.797:3011): user pid=32301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200589261.797:3012): login pid=32301 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200589261.804:3013): user pid=32301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200589261.810:3014): user pid=32301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200589261.810:3015): user pid=32301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200592861.823:3016): user pid=868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200592861.823:3017): user pid=868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200592861.824:3018): login pid=868 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200592861.827:3019): user pid=868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200592861.832:3020): user pid=868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200592861.832:3021): user pid=868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200596461.847:3022): user pid=1968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200596461.847:3023): user pid=1968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200596461.847:3024): login pid=1968 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200596461.855:3025): user pid=1968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200596461.861:3026): user pid=1968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200596461.861:3027): user pid=1968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200598616.707:3028): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2604 comm="f-spot" sig=6 >type=ANOM_ABEND msg=audit(1200599950.199:3029): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3040 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200600061.875:3030): user pid=3063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200600061.876:3031): user pid=3063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200600061.876:3032): login pid=3063 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200600061.881:3033): user pid=3063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200600061.886:3034): user pid=3063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200600061.886:3035): user pid=3063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200603661.902:3036): user pid=4107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200603661.902:3037): user pid=4107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200603661.903:3038): login pid=4107 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200603661.910:3039): user pid=4107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200603661.915:3040): user pid=4107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200603661.915:3041): user pid=4107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200607261.929:3042): user pid=5111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200607261.930:3043): user pid=5111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200607261.930:3044): login pid=5111 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200607261.938:3045): user pid=5111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200607261.944:3046): user pid=5111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200607261.944:3047): user pid=5111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200609889.532:3048): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5849 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200610861.959:3049): user pid=6139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200610861.959:3050): user pid=6139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200610861.959:3051): login pid=6139 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200610861.967:3052): user pid=6139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200610861.972:3053): user pid=6139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200610861.972:3054): user pid=6139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200614461.986:3055): user pid=7114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200614461.987:3056): user pid=7114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200614461.987:3057): login pid=7114 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200614461.995:3058): user pid=7114 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200614462.001:3059): user pid=7114 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200614462.001:3060): user pid=7114 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200616713.551:3061): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7798 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200618061.016:3062): user pid=8161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200618061.016:3063): user pid=8161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200618061.016:3064): login pid=8161 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200618061.025:3065): user pid=8161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200618061.032:3066): user pid=8161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200618061.032:3067): user pid=8161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200621661.047:3068): user pid=9191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200621661.048:3069): user pid=9191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200621661.048:3070): login pid=9191 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200621661.054:3071): user pid=9191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200621661.059:3072): user pid=9191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200621661.059:3073): user pid=9191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200625261.074:3074): user pid=10195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200625261.074:3075): user pid=10195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200625261.074:3076): login pid=10195 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200625261.082:3077): user pid=10195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200625261.087:3078): user pid=10195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200625261.088:3079): user pid=10195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200628861.102:3080): user pid=11224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200628861.102:3081): user pid=11224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200628861.103:3082): login pid=11224 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200628861.110:3083): user pid=11224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200628861.115:3084): user pid=11224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200628861.115:3085): user pid=11224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200632461.129:3086): user pid=12203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200632461.129:3087): user pid=12203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200632461.129:3088): login pid=12203 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200632461.138:3089): user pid=12203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200632461.143:3090): user pid=12203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200632461.143:3091): user pid=12203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200636061.157:3092): user pid=13175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200636061.158:3093): user pid=13175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200636061.158:3094): login pid=13175 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200636061.166:3095): user pid=13175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200636061.171:3096): user pid=13175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200636061.171:3097): user pid=13175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200639661.185:3098): user pid=14149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200639661.186:3099): user pid=14149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200639661.186:3100): login pid=14149 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200639661.192:3101): user pid=14149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200639661.196:3102): user pid=14149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200639661.197:3103): user pid=14149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200643261.210:3104): user pid=15170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200643261.211:3105): user pid=15170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200643261.211:3106): login pid=15170 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200643261.220:3107): user pid=15170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200643261.225:3108): user pid=15170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200643261.225:3109): user pid=15170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200645001.235:3110): user pid=15645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200645001.236:3111): user pid=15645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200645001.236:3112): login pid=15645 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200645001.244:3113): user pid=15645 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200646861.239:3114): user pid=12341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200646861.239:3115): user pid=12341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200646861.239:3116): login pid=12341 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200646861.243:3117): user pid=12341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200646861.250:3118): user pid=12341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200646861.250:3119): user pid=12341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200650461.271:3120): user pid=9618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200650461.271:3121): user pid=9618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200650461.271:3122): login pid=9618 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200650461.279:3123): user pid=9618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200650461.285:3124): user pid=9618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200650461.285:3125): user pid=9618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200650521.292:3126): user pid=9636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200650521.292:3127): user pid=9636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200650521.293:3128): login pid=9636 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200650521.300:3129): user pid=9636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200651191.037:3130): user pid=9636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200651191.037:3131): user pid=9636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200654061.051:3132): user pid=13375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200654061.051:3133): user pid=13375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200654061.051:3134): login pid=13375 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200654061.058:3135): user pid=13375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200654061.064:3136): user pid=13375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200654061.064:3137): user pid=13375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200655201.074:3138): user pid=13689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200655201.074:3139): user pid=13689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200655201.074:3140): login pid=13689 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200655201.080:3141): user pid=13689 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200655801.342:3142): user pid=17706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200655801.342:3143): user pid=17706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200655801.343:3144): login pid=17706 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200655801.349:3145): user pid=17706 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200657661.503:3146): user pid=18969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200657661.503:3147): user pid=18969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200657661.503:3148): login pid=18969 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200657661.512:3149): user pid=18969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200657661.516:3150): user pid=18969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200657661.517:3151): user pid=18969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200661261.532:3152): user pid=20017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200661261.532:3153): user pid=20017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200661261.532:3154): login pid=20017 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200661261.539:3155): user pid=20017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200661261.545:3156): user pid=20017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200661261.545:3157): user pid=20017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200662101.552:3158): user pid=20248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200662101.553:3159): user pid=20248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200662101.553:3160): login pid=20248 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200662101.560:3161): user pid=20248 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200664861.713:3162): user pid=21034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200664861.714:3163): user pid=21034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200664861.714:3164): login pid=21034 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200664861.720:3165): user pid=21034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200664861.746:3166): user pid=21034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200664861.746:3167): user pid=21034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200668461.764:3168): user pid=22181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200668461.764:3169): user pid=22181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200668461.765:3170): login pid=22181 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200668461.773:3171): user pid=22181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200668461.778:3172): user pid=22181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200668461.778:3173): user pid=22181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200669407.163:3174): user pid=22476 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200669707.523:3175): user pid=22565 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1200669707.527:3176): user pid=22565 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_START msg=audit(1200669707.556:3177): user pid=22565 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_ACQ msg=audit(1200669707.575:3178): user pid=22565 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_DISP msg=audit(1200669929.765:3179): user pid=22565 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_END msg=audit(1200669929.767:3180): user pid=22565 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=ANOM_ABEND msg=audit(1200670820.257:3181): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=22981 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200672061.935:3182): user pid=23323 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200672061.935:3183): user pid=23323 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200672061.936:3184): login pid=23323 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200672061.936:3185): user pid=23323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200672061.942:3186): user pid=23323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200672061.942:3187): user pid=23323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200675661.956:3188): user pid=24300 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200675661.957:3189): user pid=24300 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200675661.957:3190): login pid=24300 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200675661.958:3191): user pid=24300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200675661.962:3192): user pid=24300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200675661.962:3193): user pid=24300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200676699.133:3194): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=24611 comm="f-spot" sig=6 >type=ANOM_ABEND msg=audit(1200678500.376:3195): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=25099 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200679261.977:3196): user pid=25323 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200679261.978:3197): user pid=25323 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200679261.978:3198): login pid=25323 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200679261.979:3199): user pid=25323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200679261.984:3200): user pid=25323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200679261.985:3201): user pid=25323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200682861.999:3202): user pid=26285 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200682861.999:3203): user pid=26285 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200682861.999:3204): login pid=26285 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200682862.002:3205): user pid=26285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200682862.009:3206): user pid=26285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200682862.010:3207): user pid=26285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200685405.064:3208): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26992 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200686461.025:3209): user pid=27277 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200686461.026:3210): user pid=27277 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200686461.026:3211): login pid=27277 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200686461.027:3212): user pid=27277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200686461.033:3213): user pid=27277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200686461.033:3214): user pid=27277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200687120.405:3215): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=27459 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200690061.048:3216): user pid=28593 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200690061.048:3217): user pid=28593 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200690061.048:3218): login pid=28593 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200690061.049:3219): user pid=28593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200690061.055:3220): user pid=28593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200690061.055:3221): user pid=28593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200692577.885:3222): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=29289 comm="npviewer.bin" sig=11 >type=ANOM_ABEND msg=audit(1200693367.467:3224): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=29585 comm="npviewer.bin" sig=11 >type=ANOM_ABEND msg=audit(1200693367.467:3223): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=29584 comm="npviewer.bin" sig=11 >type=USER_ACCT msg=audit(1200693661.071:3225): user pid=29695 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200693661.071:3226): user pid=29695 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200693661.071:3227): login pid=29695 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200693661.073:3228): user pid=29695 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200693661.078:3229): user pid=29695 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200693661.078:3230): user pid=29695 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200695808.374:3231): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9494 comm="firefox-bin" sig=6 >type=USER_ACCT msg=audit(1200697261.094:3232): user pid=30788 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200697261.095:3233): user pid=30788 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200697261.095:3234): login pid=30788 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200697261.096:3235): user pid=30788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200697261.101:3236): user pid=30788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200697261.101:3237): user pid=30788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200700861.115:3238): user pid=31777 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200700861.116:3239): user pid=31777 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200700861.116:3240): login pid=31777 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200700861.117:3241): user pid=31777 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200700861.123:3242): user pid=31777 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200700861.123:3243): user pid=31777 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200704461.138:3244): user pid=359 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200704461.138:3245): user pid=359 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200704461.139:3246): login pid=359 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200704461.140:3247): user pid=359 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200704461.145:3248): user pid=359 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200704461.145:3249): user pid=359 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200708061.159:3250): user pid=1348 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200708061.160:3251): user pid=1348 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200708061.160:3252): login pid=1348 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200708061.161:3253): user pid=1348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200708061.167:3254): user pid=1348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200708061.168:3255): user pid=1348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200711661.182:3256): user pid=2358 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200711661.182:3257): user pid=2358 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200711661.182:3258): login pid=2358 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200711661.184:3259): user pid=2358 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200711661.189:3260): user pid=2358 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200711661.189:3261): user pid=2358 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200715261.203:3262): user pid=3482 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200715261.204:3263): user pid=3482 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200715261.204:3264): login pid=3482 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200715261.205:3265): user pid=3482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200715261.211:3266): user pid=3482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200715261.211:3267): user pid=3482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200718861.226:3268): user pid=4686 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200718861.226:3269): user pid=4686 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200718861.226:3270): login pid=4686 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200718861.228:3271): user pid=4686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200718861.234:3272): user pid=4686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200718861.234:3273): user pid=4686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200722461.248:3274): user pid=5671 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200722461.249:3275): user pid=5671 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200722461.249:3276): login pid=5671 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200722461.250:3277): user pid=5671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200722461.255:3278): user pid=5671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200722461.255:3279): user pid=5671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200726061.269:3280): user pid=6581 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200726061.269:3281): user pid=6581 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200726061.269:3282): login pid=6581 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200726061.270:3283): user pid=6581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200726061.275:3284): user pid=6581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200726061.276:3285): user pid=6581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200729661.289:3286): user pid=7547 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200729661.290:3287): user pid=7547 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200729661.290:3288): login pid=7547 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200729661.291:3289): user pid=7547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200729661.296:3290): user pid=7547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200729661.296:3291): user pid=7547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200733261.310:3292): user pid=8468 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200733261.310:3293): user pid=8468 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200733261.310:3294): login pid=8468 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200733261.311:3295): user pid=8468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200733261.316:3296): user pid=8468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200733261.316:3297): user pid=8468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200736861.330:3298): user pid=9419 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200736861.330:3299): user pid=9419 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200736861.331:3300): login pid=9419 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200736861.332:3301): user pid=9419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200736861.336:3302): user pid=9419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200736861.337:3303): user pid=9419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200736921.344:3304): user pid=9433 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200736921.344:3305): user pid=9433 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200736921.344:3306): login pid=9433 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200736921.345:3307): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200737472.242:3308): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200737472.242:3309): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200738130.744:3310): user pid=10393 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_ACCT msg=audit(1200738130.747:3311): user pid=10393 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_START msg=audit(1200738130.762:3312): user pid=10393 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_ACQ msg=audit(1200738130.762:3313): user pid=10393 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=CRED_DISP msg=audit(1200738370.360:3314): user pid=10393 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=USER_END msg=audit(1200738370.360:3315): user pid=10393 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)' >type=ANOM_ABEND msg=audit(1200739098.036:3316): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=10723 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200740461.257:3317): user pid=11091 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200740461.257:3318): user pid=11091 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200740461.257:3319): login pid=11091 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200740461.258:3320): user pid=11091 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200740461.263:3321): user pid=11091 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200740461.264:3322): user pid=11091 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200741601.273:3323): user pid=11405 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200741601.274:3324): user pid=11405 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200741601.274:3325): login pid=11405 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1200741601.275:3326): user pid=11405 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200742201.375:3327): user pid=15360 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200742201.375:3328): user pid=15360 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200742201.376:3329): login pid=15360 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1200742201.376:3330): user pid=15360 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200744061.461:3331): user pid=16603 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200744061.461:3332): user pid=16603 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200744061.461:3333): login pid=16603 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200744061.463:3334): user pid=16603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200744061.468:3335): user pid=16603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200744061.468:3336): user pid=16603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200745119.094:3337): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16899 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200747661.483:3338): user pid=17616 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200747661.484:3339): user pid=17616 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200747661.484:3340): login pid=17616 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200747661.485:3341): user pid=17616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200747661.491:3342): user pid=17616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200747661.492:3343): user pid=17616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200748501.501:3344): user pid=17847 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200748501.501:3345): user pid=17847 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200748501.501:3346): login pid=17847 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1200748501.502:3347): user pid=17847 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200751261.585:3348): user pid=18613 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200751261.586:3349): user pid=18613 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200751261.586:3350): login pid=18613 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200751261.596:3351): user pid=18613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200751261.618:3352): user pid=18613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200751261.619:3353): user pid=18613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200754861.682:3354): user pid=19610 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200754861.683:3355): user pid=19610 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200754861.683:3356): login pid=19610 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200754861.684:3357): user pid=19610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200754861.691:3358): user pid=19610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200754861.691:3359): user pid=19610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200758461.705:3360): user pid=20594 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200758461.706:3361): user pid=20594 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200758461.706:3362): login pid=20594 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200758461.707:3363): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200758461.712:3364): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200758461.713:3365): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200762061.727:3366): user pid=21589 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200762061.727:3367): user pid=21589 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200762061.727:3368): login pid=21589 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200762061.728:3369): user pid=21589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200762061.734:3370): user pid=21589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200762061.734:3371): user pid=21589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200762943.898:3372): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=21837 comm="f-spot" sig=6 >type=AVC msg=audit(1200763426.701:3373): avc: denied { getattr } for pid=19468 comm="httpd" path="/home/rick/photos/catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200763426.701:3373): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19468 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200763426.701:3374): avc: denied { read } for pid=19468 comm="httpd" name="catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1200763426.701:3374): arch=40000003 syscall=5 success=yes exit=18 a0=b8fa3470 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=19468 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200763439.873:3375): avc: denied { getattr } for pid=19470 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=47710275 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1200763439.873:3375): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19470 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1200763455.400:3376): avc: denied { read } for pid=19467 comm="httpd" name="m4v01187.thm" dev=dm-0 ino=57835549 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1200763455.400:3376): arch=40000003 syscall=5 success=yes exit=18 a0=b8f9f4e0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=19467 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1200765661.748:3377): user pid=22614 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200765661.749:3378): user pid=22614 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200765661.749:3379): login pid=22614 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200765661.750:3380): user pid=22614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200765661.755:3381): user pid=22614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200765661.755:3382): user pid=22614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200769261.770:3383): user pid=23672 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200769261.771:3384): user pid=23672 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200769261.771:3385): login pid=23672 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200769261.772:3386): user pid=23672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200769261.778:3387): user pid=23672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200769261.778:3388): user pid=23672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200772861.792:3389): user pid=24653 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200772861.792:3390): user pid=24653 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200772861.793:3391): login pid=24653 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200772861.794:3392): user pid=24653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200772861.799:3393): user pid=24653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200772861.799:3394): user pid=24653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200776461.815:3395): user pid=25718 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200776461.815:3396): user pid=25718 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200776461.815:3397): login pid=25718 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200776461.817:3398): user pid=25718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200776461.823:3399): user pid=25718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200776461.823:3400): user pid=25718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200776706.731:3401): user pid=25789 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1200776706.734:3402): user pid=25789 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1200776706.778:3403): user pid=25789 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1200776706.796:3404): user pid=25789 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1200776828.397:3405): user pid=25789 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1200776828.398:3406): user pid=25789 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1200776860.068:3407): user pid=25884 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1200776860.072:3408): user pid=25884 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1200776860.085:3409): user pid=25884 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1200776860.085:3410): user pid=25884 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200778267.328:3411): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200778267.332:3412): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200778267.371:3413): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200778267.375:3414): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1200778267.379:3415): avc: denied { getattr } for pid=26566 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200778267.379:3415): arch=40000003 syscall=229 success=yes exit=33 a0=b8d07588 a1=32d723 a2=b8d06ca0 a3=ff items=0 ppid=26565 pid=26566 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1200778267.380:3416): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200778267.384:3417): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200778267.414:3418): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200778267.420:3419): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1200779183.026:3420): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26873 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200780061.840:3421): user pid=27121 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200780061.841:3422): user pid=27121 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200780061.841:3423): login pid=27121 uid=0 old auid=500 new auid=0 >type=USER_START msg=audit(1200780061.842:3424): user pid=27121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200780061.850:3425): user pid=27121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200780061.850:3426): user pid=27121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200781440.140:3427): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3318 comm="exe" sig=6 >type=CRED_DISP msg=audit(1200781440.252:3428): user pid=25884 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1200781440.254:3429): user pid=25884 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1200781441.343:3430): user pid=3164 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1200781441.344:3431): user pid=3164 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1200781444.335:3432): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3086 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1200781461.419:7758): auditd normal halt, sending auid=4294967295 pid=28179 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1977 >type=DAEMON_START msg=audit(1200781519.908:3810): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1960 res=success, auditd pid=1960 >type=CONFIG_CHANGE msg=audit(1200781520.008:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200781520.008:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200781520.041:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200781520.041:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1200781534.041:8): avc: denied { write } for pid=2454 comm="rpc.mountd" name="control" dev=tmpfs ino=286 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200781534.041:8): arch=40000003 syscall=5 success=yes exit=9 a0=bf8d2a14 a1=8002 a2=0 a3=8002 items=0 ppid=1 pid=2454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1200781541.762:9): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200781541.911:10): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200781542.059:11): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200781542.063:12): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1200781542.108:13): avc: denied { getattr } for pid=2967 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1200781542.108:13): arch=40000003 syscall=229 success=yes exit=33 a0=b9aa7588 a1=32d723 a2=b9aa6ca0 a3=ff items=0 ppid=2966 pid=2967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1200781542.202:14): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200781542.216:15): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200781542.327:16): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1200781542.351:17): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1200781564.419:18): user pid=3233 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1200781564.427:19): user pid=3233 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1200781564.428:20): user pid=3233 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1200781564.435:21): login pid=3233 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1200781564.460:22): user pid=3233 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200781564.513:23): user pid=3233 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1200781564.514:24): user pid=3233 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1200782867.016:25): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5013 comm="rarian-sk-get-c" sig=11 >type=USER_ACCT msg=audit(1200783661.906:26): user pid=6544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200783661.906:27): user pid=6544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200783661.906:28): login pid=6544 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200783661.914:29): user pid=6544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200783661.960:30): user pid=6544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200783661.960:31): user pid=6544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200787261.974:32): user pid=7594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200787261.975:33): user pid=7594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200787261.975:34): login pid=7594 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200787261.981:35): user pid=7594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200787261.986:36): user pid=7594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200787261.986:37): user pid=7594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200790861.999:38): user pid=8587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200790861.999:39): user pid=8587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200790862.000:40): login pid=8587 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200790862.007:41): user pid=8587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200790862.012:42): user pid=8587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200790862.013:43): user pid=8587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200794372.198:44): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9554 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200794461.025:45): user pid=9581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200794461.026:46): user pid=9581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200794461.026:47): login pid=9581 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200794461.034:48): user pid=9581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200794461.038:49): user pid=9581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200794461.039:50): user pid=9581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200794885.557:51): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9699 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200798061.052:52): user pid=10585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200798061.052:53): user pid=10585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200798061.052:54): login pid=10585 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200798061.058:55): user pid=10585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200798061.063:56): user pid=10585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200798061.063:57): user pid=10585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200801661.077:58): user pid=11561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200801661.077:59): user pid=11561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200801661.077:60): login pid=11561 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200801661.085:61): user pid=11561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200801661.090:62): user pid=11561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200801661.090:63): user pid=11561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200805261.103:64): user pid=12544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200805261.103:65): user pid=12544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200805261.103:66): login pid=12544 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200805261.109:67): user pid=12544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200805261.114:68): user pid=12544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200805261.114:69): user pid=12544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200808861.133:70): user pid=13529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200808861.134:71): user pid=13529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200808861.134:72): login pid=13529 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200808861.140:73): user pid=13529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200808861.145:74): user pid=13529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200808861.145:75): user pid=13529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200812461.161:76): user pid=14378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200812461.161:77): user pid=14378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200812461.162:78): login pid=14378 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200812461.170:79): user pid=14378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200812461.175:80): user pid=14378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200812461.175:81): user pid=14378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200813254.258:82): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14601 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200816061.189:83): user pid=15365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200816061.189:84): user pid=15365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200816061.190:85): login pid=15365 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200816061.198:86): user pid=15365 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200816061.203:87): user pid=15365 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200816061.203:88): user pid=15365 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200819661.216:89): user pid=16338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200819661.216:90): user pid=16338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200819661.216:91): login pid=16338 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200819661.223:92): user pid=16338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200819661.228:93): user pid=16338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200819661.228:94): user pid=16338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200823261.240:95): user pid=17316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200823261.241:96): user pid=17316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200823261.241:97): login pid=17316 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200823261.246:98): user pid=17316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200823261.251:99): user pid=17316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200823261.251:100): user pid=17316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200823321.256:101): user pid=17337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200823321.257:102): user pid=17337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200823321.257:103): login pid=17337 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200823321.264:104): user pid=17337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200823925.134:105): user pid=17337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200823925.135:106): user pid=17337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200824521.143:107): user pid=18429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200824521.144:108): user pid=18429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200824521.144:109): login pid=18429 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200824521.154:110): user pid=18429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200825295.931:111): user pid=18429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200825295.931:112): user pid=18429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200826861.940:113): user pid=24155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200826861.940:114): user pid=24155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200826861.941:115): login pid=24155 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200826861.951:116): user pid=24155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200826861.957:117): user pid=24155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200826861.957:118): user pid=24155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200828001.966:119): user pid=24498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200828001.966:120): user pid=24498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200828001.966:121): login pid=24498 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200828001.975:122): user pid=24498 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200828601.344:123): user pid=28533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200828601.344:124): user pid=28533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200828601.344:125): login pid=28533 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200828601.353:126): user pid=28533 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200829823.383:127): user pid=29648 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200829823.383:128): user pid=29648 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200829823.469:129): user pid=29648 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200829929.010:130): user pid=29648 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200830461.822:131): user pid=30158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200830461.822:132): user pid=30158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200830461.822:133): login pid=30158 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200830461.832:134): user pid=30158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200830461.836:135): user pid=30158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200830461.837:136): user pid=30158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200830712.269:137): user pid=30231 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1200830712.271:138): user pid=30231 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1200830712.288:139): user pid=30231 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1200830712.288:140): user pid=30231 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1200830873.646:141): user pid=30231 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1200830873.647:142): user pid=30231 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1200830910.064:143): user pid=30337 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1200830910.067:144): user pid=30337 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1200830910.083:145): user pid=30337 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1200830910.083:146): user pid=30337 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1200830959.422:147): user pid=30337 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1200830959.422:148): user pid=30337 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1200834061.851:149): user pid=31296 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200834061.852:150): user pid=31296 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200834061.852:151): login pid=31296 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200834061.856:152): user pid=31296 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200834061.861:153): user pid=31296 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200834061.861:154): user pid=31296 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200834901.869:155): user pid=31537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200834901.869:156): user pid=31537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200834901.869:157): login pid=31537 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200834901.876:158): user pid=31537 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200837661.432:159): user pid=32328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200837661.432:160): user pid=32328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200837661.433:161): login pid=32328 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200837661.439:162): user pid=32328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200837661.444:163): user pid=32328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200837661.444:164): user pid=32328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200841261.457:165): user pid=851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200841261.458:166): user pid=851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200841261.458:167): login pid=851 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200841261.464:168): user pid=851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200841261.469:169): user pid=851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200841261.470:170): user pid=851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200844861.483:171): user pid=1867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200844861.484:172): user pid=1867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200844861.484:173): login pid=1867 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200844861.492:174): user pid=1867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200844861.496:175): user pid=1867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200844861.496:176): user pid=1867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200848461.511:177): user pid=12397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200848461.512:178): user pid=12397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200848461.512:179): login pid=12397 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200848461.521:180): user pid=12397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200848461.525:181): user pid=12397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200848461.526:182): user pid=12397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200852048.404:183): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13467 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200852061.539:184): user pid=13473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200852061.539:185): user pid=13473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200852061.540:186): login pid=13473 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200852061.547:187): user pid=13473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200852061.552:188): user pid=13473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200852061.552:189): user pid=13473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200854631.364:190): user pid=14188 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200854631.364:191): user pid=14188 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200854631.402:192): user pid=14188 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200854685.689:193): user pid=14188 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200855661.566:194): user pid=14506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200855661.567:195): user pid=14506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200855661.567:196): login pid=14506 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200855661.574:197): user pid=14506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200855661.578:198): user pid=14506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200855661.578:199): user pid=14506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200856216.963:200): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14666 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200859261.591:201): user pid=15507 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200859261.592:202): user pid=15507 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200859261.592:203): login pid=15507 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200859261.599:204): user pid=15507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200859261.603:205): user pid=15507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200859261.604:206): user pid=15507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200862861.618:207): user pid=16592 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200862861.618:208): user pid=16592 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200862861.619:209): login pid=16592 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200862861.629:210): user pid=16592 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200862861.633:211): user pid=16592 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200862861.634:212): user pid=16592 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200866461.646:213): user pid=17561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200866461.647:214): user pid=17561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200866461.647:215): login pid=17561 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200866461.655:216): user pid=17561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200866461.660:217): user pid=17561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200866461.660:218): user pid=17561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200870061.673:219): user pid=18567 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200870061.673:220): user pid=18567 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200870061.674:221): login pid=18567 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200870061.680:222): user pid=18567 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200870061.685:223): user pid=18567 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200870061.685:224): user pid=18567 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200873661.698:225): user pid=19573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200873661.699:226): user pid=19573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200873661.700:227): login pid=19573 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200873661.705:228): user pid=19573 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200873661.711:229): user pid=19573 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200873661.711:230): user pid=19573 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200877261.726:231): user pid=20579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200877261.727:232): user pid=20579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200877261.727:233): login pid=20579 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200877261.735:234): user pid=20579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200877261.740:235): user pid=20579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200877261.740:236): user pid=20579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200877511.650:237): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20649 comm="f-spot" sig=6 >type=ANOM_ABEND msg=audit(1200879805.635:238): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=21287 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200880861.753:239): user pid=21588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200880861.753:240): user pid=21588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200880861.754:241): login pid=21588 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200880861.759:242): user pid=21588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200880861.764:243): user pid=21588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200880861.764:244): user pid=21588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200884461.780:245): user pid=22706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200884461.781:246): user pid=22706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200884461.781:247): login pid=22706 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200884461.790:248): user pid=22706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200884461.796:249): user pid=22706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200884461.796:250): user pid=22706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200888061.811:251): user pid=23711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200888061.811:252): user pid=23711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200888061.811:253): login pid=23711 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200888061.815:254): user pid=23711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200888061.820:255): user pid=23711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200888061.820:256): user pid=23711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200891661.833:257): user pid=24699 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200891661.833:258): user pid=24699 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200891661.834:259): login pid=24699 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200891661.841:260): user pid=24699 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200891661.846:261): user pid=24699 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200891661.846:262): user pid=24699 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200895261.859:263): user pid=25685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200895261.859:264): user pid=25685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200895261.859:265): login pid=25685 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200895261.866:266): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200895261.870:267): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200895261.870:268): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200898861.883:269): user pid=27174 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200898861.884:270): user pid=27174 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200898861.885:271): login pid=27174 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200898861.889:272): user pid=27174 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200898861.894:273): user pid=27174 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200898861.895:274): user pid=27174 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200902461.908:275): user pid=28826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200902461.909:276): user pid=28826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200902461.910:277): login pid=28826 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200902461.914:278): user pid=28826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200902461.922:279): user pid=28826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200902461.922:280): user pid=28826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200903337.408:281): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=29076 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200904201.932:282): user pid=29322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200904201.932:283): user pid=29322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200904201.932:284): login pid=29322 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200904201.940:285): user pid=29322 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200906061.947:286): user pid=25747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200906061.947:287): user pid=25747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200906061.948:288): login pid=25747 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200906061.953:289): user pid=25747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200906061.959:290): user pid=25747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200906061.959:291): user pid=25747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200909661.654:292): user pid=22747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200909661.655:293): user pid=22747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200909661.655:294): login pid=22747 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200909661.661:295): user pid=22747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200909661.666:296): user pid=22747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200909661.666:297): user pid=22747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200909721.671:298): user pid=22769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200909721.672:299): user pid=22769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200909721.672:300): login pid=22769 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200909721.678:301): user pid=22769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200910264.971:302): user pid=22769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200910264.972:303): user pid=22769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200913261.987:304): user pid=24488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200913261.988:305): user pid=24488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200913261.988:306): login pid=24488 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200913261.995:307): user pid=24488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200913262.002:308): user pid=24488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200913262.002:309): user pid=24488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200914401.010:310): user pid=24798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200914401.010:311): user pid=24798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200914401.010:312): login pid=24798 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200914401.013:313): user pid=24798 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200914435.732:314): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26432 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200915001.955:315): user pid=28831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200915001.956:316): user pid=28831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200915001.956:317): login pid=28831 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200915001.961:318): user pid=28831 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200916153.567:319): user pid=29919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/20 res=success)' >type=USER_ACCT msg=audit(1200916153.570:320): user pid=29919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/20 res=success)' >type=USER_START msg=audit(1200916153.586:321): user pid=29919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/20 res=success)' >type=CRED_ACQ msg=audit(1200916153.600:322): user pid=29919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/20 res=success)' >type=CRED_DISP msg=audit(1200916274.535:323): user pid=29919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/20 res=success)' >type=USER_END msg=audit(1200916274.535:324): user pid=29919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/20 res=success)' >type=USER_ACCT msg=audit(1200916861.940:325): user pid=30183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200916861.941:326): user pid=30183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200916861.941:327): login pid=30183 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200916861.946:328): user pid=30183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200916861.951:329): user pid=30183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200916861.951:330): user pid=30183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200920461.966:331): user pid=31286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200920461.968:332): user pid=31286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200920461.968:333): login pid=31286 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200920461.977:334): user pid=31286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200920461.982:335): user pid=31286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200920461.983:336): user pid=31286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200921301.990:337): user pid=31526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200921301.991:338): user pid=31526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200921301.991:339): login pid=31526 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1200921301.996:340): user pid=31526 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200924061.998:341): user pid=32288 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200924061.999:342): user pid=32288 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200924061.999:343): login pid=32288 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200924062.006:344): user pid=32288 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200924062.011:345): user pid=32288 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200924062.011:346): user pid=32288 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200927661.982:347): user pid=839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200927661.982:348): user pid=839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200927661.983:349): login pid=839 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200927661.989:350): user pid=839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200927661.995:351): user pid=839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200927661.995:352): user pid=839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200931261.009:353): user pid=1842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200931261.010:354): user pid=1842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200931261.010:355): login pid=1842 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200931261.017:356): user pid=1842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200931261.022:357): user pid=1842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200931261.022:358): user pid=1842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200934861.035:359): user pid=3020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200934861.036:360): user pid=3020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200934861.036:361): login pid=3020 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200934861.041:362): user pid=3020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200934861.046:363): user pid=3020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200934861.046:364): user pid=3020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200938461.064:365): user pid=5840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200938461.064:366): user pid=5840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200938461.064:367): login pid=5840 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200938461.067:368): user pid=5840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200938461.073:369): user pid=5840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200938461.073:370): user pid=5840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200942061.089:371): user pid=10519 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200942061.090:372): user pid=10519 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200942061.090:373): login pid=10519 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200942061.096:374): user pid=10519 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200942061.102:375): user pid=10519 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200942061.102:376): user pid=10519 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200945661.115:377): user pid=11560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200945661.116:378): user pid=11560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200945661.116:379): login pid=11560 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200945661.123:380): user pid=11560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200945661.129:381): user pid=11560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200945661.129:382): user pid=11560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200949261.142:383): user pid=12555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200949261.142:384): user pid=12555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200949261.143:385): login pid=12555 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200949261.148:386): user pid=12555 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200949261.153:387): user pid=12555 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200949261.153:388): user pid=12555 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200952861.168:389): user pid=13544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200952861.168:390): user pid=13544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200952861.168:391): login pid=13544 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200952861.173:392): user pid=13544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200952861.178:393): user pid=13544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200952861.178:394): user pid=13544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200956461.191:395): user pid=14526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200956461.192:396): user pid=14526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200956461.192:397): login pid=14526 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200956461.201:398): user pid=14526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200956461.206:399): user pid=14526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200956461.206:400): user pid=14526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200960061.218:401): user pid=15518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200960061.219:402): user pid=15518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200960061.219:403): login pid=15518 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200960061.226:404): user pid=15518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200960061.231:405): user pid=15518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200960061.231:406): user pid=15518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200963661.245:407): user pid=16553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200963661.246:408): user pid=16553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200963661.246:409): login pid=16553 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200963661.253:410): user pid=16553 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200963661.258:411): user pid=16553 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200963661.258:412): user pid=16553 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200966700.386:413): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17431 comm="npviewer.bin" sig=11 >type=USER_ACCT msg=audit(1200967261.272:414): user pid=17617 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200967261.272:415): user pid=17617 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200967261.272:416): login pid=17617 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200967261.280:417): user pid=17617 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200967261.286:418): user pid=17617 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200967261.286:419): user pid=17617 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200967902.744:420): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17806 comm="f-spot" sig=6 >type=ANOM_ABEND msg=audit(1200968655.811:421): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18027 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200970861.299:422): user pid=18651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200970861.300:423): user pid=18651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200970861.300:424): login pid=18651 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200970861.305:425): user pid=18651 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200970861.310:426): user pid=18651 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200970861.311:427): user pid=18651 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200972579.815:428): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19164 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200974461.325:429): user pid=19693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200974461.326:430): user pid=19693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200974461.326:431): login pid=19693 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200974461.334:432): user pid=19693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200974461.339:433): user pid=19693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200974461.340:434): user pid=19693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200978061.352:435): user pid=20677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200978061.352:436): user pid=20677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200978061.353:437): login pid=20677 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200978061.358:438): user pid=20677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200978061.363:439): user pid=20677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200978061.363:440): user pid=20677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200981661.377:441): user pid=21664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200981661.377:442): user pid=21664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200981661.378:443): login pid=21664 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200981661.382:444): user pid=21664 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200981661.388:445): user pid=21664 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200981661.388:446): user pid=21664 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200985261.400:447): user pid=22647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200985261.401:448): user pid=22647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200985261.401:449): login pid=22647 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200985261.407:450): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200985261.412:451): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200985261.412:452): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200988861.426:453): user pid=23634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200988861.427:454): user pid=23634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200988861.427:455): login pid=23634 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200988861.434:456): user pid=23634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200988861.439:457): user pid=23634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200988861.439:458): user pid=23634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200992279.915:459): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=24584 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200992461.453:460): user pid=24636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200992461.453:461): user pid=24636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200992461.453:462): login pid=24636 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200992461.457:463): user pid=24636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200992461.462:464): user pid=24636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200992461.463:465): user pid=24636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1200992685.837:466): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=24697 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1200996061.480:467): user pid=26305 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200996061.481:468): user pid=26305 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200996061.482:469): login pid=26305 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200996061.490:470): user pid=26305 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200996061.496:471): user pid=26305 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200996061.496:472): user pid=26305 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200996121.503:473): user pid=26325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200996121.503:474): user pid=26325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200996121.504:475): login pid=26325 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200996121.512:476): user pid=26325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200996648.595:477): user pid=26325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200996648.595:478): user pid=26325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1200999661.610:479): user pid=28132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200999661.611:480): user pid=28132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200999661.611:481): login pid=28132 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200999661.619:482): user pid=28132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200999661.624:483): user pid=28132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200999661.624:484): user pid=28132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201000801.633:485): user pid=28443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201000801.635:486): user pid=28443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201000801.635:487): login pid=28443 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201000801.641:488): user pid=28443 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201001401.773:489): user pid=32444 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201001401.774:490): user pid=32444 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201001401.774:491): login pid=32444 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201001401.782:492): user pid=32444 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201003261.451:493): user pid=1253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201003261.452:494): user pid=1253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201003261.452:495): login pid=1253 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201003261.460:496): user pid=1253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201003261.465:497): user pid=1253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201003261.465:498): user pid=1253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201005563.990:499): user pid=1953 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_ACCT msg=audit(1201005563.993:500): user pid=1953 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_START msg=audit(1201005564.025:501): user pid=1953 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_ACQ msg=audit(1201005564.026:502): user pid=1953 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_DISP msg=audit(1201005719.194:503): user pid=1953 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_END msg=audit(1201005719.195:504): user pid=1953 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_AUTH msg=audit(1201005730.527:505): user pid=2054 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=rick exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_ACCT msg=audit(1201005730.531:506): user pid=2054 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_ACQ msg=audit(1201005730.547:507): user pid=2054 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_START msg=audit(1201005730.548:508): user pid=2054 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_END msg=audit(1201005730.549:509): user pid=2054 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_CMD msg=audit(1201005730.549:510): user pid=2054 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/rick" cmd="/bin/ls" (terminal=pts/13 res=success)' >type=CRED_ACQ msg=audit(1201005739.883:511): user pid=2061 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_START msg=audit(1201005739.885:512): user pid=2061 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_END msg=audit(1201005739.886:513): user pid=2061 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_CMD msg=audit(1201005739.887:514): user pid=2061 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/rick" cmd="/bin/ls" (terminal=pts/13 res=success)' >type=USER_ACCT msg=audit(1201006861.480:515): user pid=2416 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201006861.480:516): user pid=2416 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201006861.480:517): login pid=2416 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201006861.485:518): user pid=2416 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201006861.490:519): user pid=2416 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201006861.490:520): user pid=2416 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201007701.499:521): user pid=2674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201007701.500:522): user pid=2674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201007701.500:523): login pid=2674 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201007701.506:524): user pid=2674 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201010461.453:525): user pid=3621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201010461.454:526): user pid=3621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201010461.454:527): login pid=3621 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201010461.462:528): user pid=3621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201010461.494:529): user pid=3621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201010461.494:530): user pid=3621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201014061.510:531): user pid=4713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201014061.511:532): user pid=4713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201014061.511:533): login pid=4713 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201014061.520:534): user pid=4713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201014061.525:535): user pid=4713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201014061.525:536): user pid=4713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201016750.449:537): user pid=5557 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_ACCT msg=audit(1201016750.452:538): user pid=5557 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_START msg=audit(1201016750.519:539): user pid=5557 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_ACQ msg=audit(1201016750.519:540): user pid=5557 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_DISP msg=audit(1201016756.152:541): user pid=5557 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_END msg=audit(1201016756.153:542): user pid=5557 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_AUTH msg=audit(1201016793.049:543): user pid=5576 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_ACCT msg=audit(1201016793.052:544): user pid=5576 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_START msg=audit(1201016793.060:545): user pid=5576 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_ACQ msg=audit(1201016793.060:546): user pid=5576 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_DISP msg=audit(1201016797.044:547): user pid=5576 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_END msg=audit(1201016797.044:548): user pid=5576 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_ACCT msg=audit(1201017661.541:549): user pid=5845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201017661.541:550): user pid=5845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201017661.542:551): login pid=5845 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201017661.550:552): user pid=5845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201017661.555:553): user pid=5845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201017661.555:554): user pid=5845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201021261.570:555): user pid=6901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201021261.571:556): user pid=6901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201021261.571:557): login pid=6901 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201021261.576:558): user pid=6901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201021261.581:559): user pid=6901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201021261.581:560): user pid=6901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201021639.132:561): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7474 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1201021678.483:562): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7543 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1201021880.295:563): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7623 comm="gs" sig=11 >type=USER_ACCT msg=audit(1201024861.598:564): user pid=8631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201024861.599:565): user pid=8631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201024861.599:566): login pid=8631 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201024861.607:567): user pid=8631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201024861.613:568): user pid=8631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201024861.613:569): user pid=8631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201028461.628:570): user pid=9677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201028461.628:571): user pid=9677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201028461.628:572): login pid=9677 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201028461.638:573): user pid=9677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201028461.643:574): user pid=9677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201028461.643:575): user pid=9677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201032061.655:576): user pid=10677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201032061.656:577): user pid=10677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201032061.656:578): login pid=10677 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201032061.663:579): user pid=10677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201032061.668:580): user pid=10677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201032061.668:581): user pid=10677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201033569.304:582): user pid=11209 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201033569.304:583): user pid=11209 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201033569.315:584): user pid=11209 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201035035.930:585): user pid=11675 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=hsqldb exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AVC msg=audit(1201035153.472:586): user pid=2138 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201035153.332:587): policy loaded auid=500 >type=SYSCALL msg=audit(1201035153.332:587): arch=40000003 syscall=4 success=yes exit=3998501 a0=4 a1=b7b6d000 a2=3d0325 a3=bfdfa2e8 items=0 ppid=11828 pid=11839 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1201035265.614:588): user pid=12034 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201035267.448:589): user pid=12038 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201035280.391:590): user pid=12039 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201035282.189:591): user pid=12045 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201035284.037:592): user pid=12046 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201035296.918:593): user pid=12047 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=DAEMON_END msg=audit(1201035333.430:3811): auditd normal halt, sending auid=500 pid=12138 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1960 >type=DAEMON_START msg=audit(1201035333.595:8201): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=500 pid=12154 res=success >type=CONFIG_CHANGE msg=audit(1201035333.695:596): audit_enabled=1 old=1 by auid=500 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201035333.695:597): audit_enabled=1 old=1 by auid=500 res=1 >type=CONFIG_CHANGE msg=audit(1201035333.699:598): audit_backlog_limit=320 old=320 by auid=500 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201035333.699:599): audit_backlog_limit=320 old=320 by auid=500 res=1 >type=USER_END msg=audit(1201035402.180:600): user pid=11209 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201035661.686:601): user pid=12271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201035661.687:602): user pid=12271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201035661.687:603): login pid=12271 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201035661.694:604): user pid=12271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201035661.699:605): user pid=12271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201035661.699:606): user pid=12271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201039070.152:607): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14100 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201039261.715:608): user pid=14154 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201039261.716:609): user pid=14154 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201039261.716:610): login pid=14154 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201039261.723:611): user pid=14154 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201039261.729:612): user pid=14154 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201039261.729:613): user pid=14154 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201042861.744:614): user pid=15341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201042861.745:615): user pid=15341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201042861.745:616): login pid=15341 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201042861.752:617): user pid=15341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201042861.758:618): user pid=15341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201042861.759:619): user pid=15341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201046461.774:620): user pid=16409 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201046461.774:621): user pid=16409 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201046461.774:622): login pid=16409 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201046461.782:623): user pid=16409 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201046461.788:624): user pid=16409 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201046461.788:625): user pid=16409 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201049612.254:626): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17267 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201050061.802:627): user pid=17391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201050061.802:628): user pid=17391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201050061.803:629): login pid=17391 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201050061.810:630): user pid=17391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201050061.815:631): user pid=17391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201050061.816:632): user pid=17391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201053661.831:633): user pid=18432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201053661.831:634): user pid=18432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201053661.831:635): login pid=18432 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201053661.840:636): user pid=18432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201053661.846:637): user pid=18432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201053661.846:638): user pid=18432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201054306.531:639): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18606 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201057261.860:640): user pid=19405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201057261.861:641): user pid=19405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201057261.861:642): login pid=19405 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201057261.870:643): user pid=19405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201057261.874:644): user pid=19405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201057261.875:645): user pid=19405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201057545.898:646): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19482 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201060861.890:647): user pid=20474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201060861.890:648): user pid=20474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201060861.891:649): login pid=20474 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201060861.896:650): user pid=20474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201060861.900:651): user pid=20474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201060861.900:652): user pid=20474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201064461.915:653): user pid=21616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201064461.916:654): user pid=21616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201064461.916:655): login pid=21616 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201064461.924:656): user pid=21616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201064461.930:657): user pid=21616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201064461.930:658): user pid=21616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201068061.944:659): user pid=22596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201068061.945:660): user pid=22596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201068061.945:661): login pid=22596 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201068061.954:662): user pid=22596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201068061.959:663): user pid=22596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201068061.959:664): user pid=22596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201071661.973:665): user pid=23559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201071661.973:666): user pid=23559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201071661.973:667): login pid=23559 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201071661.982:668): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201071661.987:669): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201071661.987:670): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201075262.001:671): user pid=24528 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201075262.002:672): user pid=24528 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201075262.002:673): login pid=24528 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201075262.009:674): user pid=24528 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201075262.013:675): user pid=24528 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201075262.013:676): user pid=24528 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201077001.024:677): user pid=24994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201077001.024:678): user pid=24994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201077001.025:679): login pid=24994 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201077001.028:680): user pid=24994 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201077932.664:681): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4855 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201078861.027:682): user pid=21416 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201078861.028:683): user pid=21416 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201078861.028:684): login pid=21416 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201078861.033:685): user pid=21416 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201078861.039:686): user pid=21416 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201078861.039:687): user pid=21416 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201081559.985:688): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18198 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201082461.354:689): user pid=18442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201082461.355:690): user pid=18442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201082461.355:691): login pid=18442 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201082461.360:692): user pid=18442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201082461.366:693): user pid=18442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201082461.366:694): user pid=18442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201082521.373:695): user pid=18461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201082521.374:696): user pid=18461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201082521.374:697): login pid=18461 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201082521.382:698): user pid=18461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201083223.803:699): user pid=18461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201083223.803:700): user pid=18461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201086061.817:701): user pid=25968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201086061.818:702): user pid=25968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201086061.818:703): login pid=25968 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201086061.826:704): user pid=25968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201086061.833:705): user pid=25968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201086061.833:706): user pid=25968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201087201.842:707): user pid=26279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201087201.843:708): user pid=26279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201087201.843:709): login pid=26279 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201087201.852:710): user pid=26279 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201087801.493:711): user pid=30204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201087801.493:712): user pid=30204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201087801.493:713): login pid=30204 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201087801.502:714): user pid=30204 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201089661.797:715): user pid=31481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201089661.798:716): user pid=31481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201089661.798:717): login pid=31481 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201089661.807:718): user pid=31481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201089661.813:719): user pid=31481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201089661.813:720): user pid=31481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201093261.827:721): user pid=32512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201093261.828:722): user pid=32512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201093261.828:723): login pid=32512 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201093261.833:724): user pid=32512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201093261.839:725): user pid=32512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201093261.839:726): user pid=32512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201094101.848:727): user pid=32740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201094101.849:728): user pid=32740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201094101.849:729): login pid=32740 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201094101.856:730): user pid=32740 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201096861.629:731): user pid=1057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201096861.630:732): user pid=1057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201096861.630:733): login pid=1057 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201096861.638:734): user pid=1057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201096861.661:735): user pid=1057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201096861.662:736): user pid=1057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201100461.676:737): user pid=2146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201100461.677:738): user pid=2146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201100461.677:739): login pid=2146 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201100461.686:740): user pid=2146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201100461.692:741): user pid=2146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201100461.692:742): user pid=2146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201101052.785:743): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201101052.830:744): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=LOGIN msg=audit(1201101052.832:745): login pid=2340 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201101052.833:746): user pid=2340 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201101052.834:747): user pid=2344 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1201101056.048:748): user pid=2340 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=USER_END msg=audit(1201101056.048:749): user pid=2340 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201104061.708:750): user pid=3680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201104061.709:751): user pid=3680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201104061.709:752): login pid=3680 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201104061.715:753): user pid=3680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201104061.721:754): user pid=3680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201104061.721:755): user pid=3680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201104934.214:756): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201104934.218:757): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201104934.263:758): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201104934.271:759): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1201104934.274:760): avc: denied { getattr } for pid=4008 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201104934.274:760): arch=40000003 syscall=229 success=yes exit=33 a0=4199c588 a1=402a6723 a2=4199bca0 a3=ff items=0 ppid=4007 pid=4008 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201104934.275:761): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201104934.284:762): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201104934.304:763): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201104934.307:764): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1201105011.531:765): user pid=4028 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201105011.531:766): user pid=4028 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201105011.598:767): user pid=4028 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AVC msg=audit(1201105017.376:768): user pid=2138 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.bluez.Manager member=DefaultAdapter dest=org.bluez spid=4115 tpid=2342 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1201105017.389:769): user pid=2138 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=error error_name=org.bluez.Error.NoSuchAdapter dest=:1.136 spid=2342 tpid=4115 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1201105068.079:770): avc: denied { getattr } for pid=4008 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201105068.079:770): arch=40000003 syscall=229 success=yes exit=33 a0=42116360 a1=402a6723 a2=42102078 a3=ff items=0 ppid=1 pid=4008 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201105068.079:771): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201105068.098:772): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201105068.105:773): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1201105146.304:774): avc: denied { write } for pid=4008 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201105146.304:774): arch=40000003 syscall=5 success=yes exit=17 a0=4199c1a5 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=4008 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1201105314.417:775): user pid=4248 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_ACCT msg=audit(1201105314.422:776): user pid=4248 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_START msg=audit(1201105314.435:777): user pid=4248 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_ACQ msg=audit(1201105314.435:778): user pid=4248 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_DISP msg=audit(1201105376.612:779): user pid=4248 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_END msg=audit(1201105376.612:780): user pid=4248 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_AUTH msg=audit(1201105663.971:781): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201105663.975:782): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201105777.439:783): avc: denied { getattr } for pid=4453 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201105777.439:783): arch=40000003 syscall=229 success=yes exit=33 a0=41076b28 a1=402a6723 a2=41076b40 a3=ff items=0 ppid=4452 pid=4453 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201105777.440:784): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201105777.446:785): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201105777.448:786): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201105777.451:787): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201105777.455:788): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201105777.458:789): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201105777.461:790): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201105777.464:791): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201105777.468:792): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201105967.605:793): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201105977.097:794): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1201106002.753:795): user pid=4028 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201106064.849:796): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201106064.854:797): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201106228.523:798): user pid=4598 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201106228.523:799): user pid=4598 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201106228.534:800): user pid=4598 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106287.047:801): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1201106336.673:802): avc: denied { write } for pid=4453 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201106336.673:802): arch=40000003 syscall=5 success=yes exit=18 a0=41065f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=4453 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1201106349.659:803): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201106349.664:804): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201106443.961:805): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201106443.966:806): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201106485.766:807): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201106485.770:808): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106562.104:809): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106562.110:810): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106562.113:811): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106562.117:812): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106562.121:813): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106562.124:814): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106562.127:815): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106562.131:816): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106562.134:817): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1201106581.314:818): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201106581.319:819): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106653.577:820): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106653.591:821): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106667.425:822): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1201106733.499:823): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201106733.503:824): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201106811.014:825): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201106811.019:826): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106874.119:827): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106874.124:828): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106874.127:829): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106874.131:830): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106874.134:831): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106874.137:832): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106874.141:833): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106874.144:834): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201106874.147:835): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1201106889.061:836): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201106889.066:837): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201107661.739:838): user pid=5175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201107661.740:839): user pid=5175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201107661.740:840): login pid=5175 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201107661.749:841): user pid=5175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201107661.755:842): user pid=5175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201107661.755:843): user pid=5175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201108050.394:844): user pid=5287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_ACCT msg=audit(1201108050.398:845): user pid=5287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_START msg=audit(1201108050.411:846): user pid=5287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_ACQ msg=audit(1201108050.411:847): user pid=5287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_DISP msg=audit(1201108104.093:848): user pid=5287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_END msg=audit(1201108104.093:849): user pid=5287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=AVC msg=audit(1201108437.259:850): avc: denied { getattr } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201108437.259:850): arch=40000003 syscall=229 success=yes exit=33 a0=41e94b48 a1=402a6723 a2=41e94b60 a3=ff items=0 ppid=5454 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201108437.260:851): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201108437.265:852): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201108437.268:853): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201108437.271:854): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201108437.275:855): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201108437.278:856): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201108437.281:857): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201108437.284:858): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201108437.288:859): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1201108444.330:860): avc: denied { write } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201108444.330:860): arch=40000003 syscall=5 success=yes exit=17 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1201108463.618:861): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201108463.623:862): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201108504.920:863): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201108504.924:864): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1201108602.462:865): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5524 comm="okidecode" sig=11 >type=USER_END msg=audit(1201108695.668:866): user pid=4598 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201108759.349:867): avc: denied { write } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201108759.349:867): arch=40000003 syscall=5 success=yes exit=20 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=ANOM_ABEND msg=audit(1201108806.002:868): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5595 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201108894.282:869): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5651 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201108968.546:870): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5703 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201109048.626:871): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5732 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201109062.115:872): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5736 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201109121.027:873): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5766 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201109340.998:874): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5857 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201109459.127:875): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5904 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201109484.047:876): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5910 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201109526.327:877): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5935 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201109574.392:878): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5956 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201109668.906:879): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6001 comm="okidecode" sig=11 >type=USER_AUTH msg=audit(1201109801.062:880): user pid=6045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201109801.063:881): user pid=6045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201109801.072:882): user pid=6045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201109917.819:883): avc: denied { getattr } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201109917.819:883): arch=40000003 syscall=229 success=yes exit=33 a0=41e95d58 a1=402a6723 a2=41e95ab0 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201109917.820:884): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1201109928.660:885): user pid=6045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201110979.920:886): user pid=6416 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201110979.920:887): user pid=6416 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201110979.929:888): user pid=6416 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201111003.559:889): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201111149.840:890): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1201111261.771:891): user pid=6527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201111261.772:892): user pid=6527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201111261.772:893): login pid=6527 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201111261.779:894): user pid=6527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201111261.786:895): user pid=6527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201111261.786:896): user pid=6527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201111727.240:897): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1201111841.695:898): avc: denied { write } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201111841.695:898): arch=40000003 syscall=5 success=yes exit=21 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201111889.425:899): avc: denied { getattr } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201111889.425:899): arch=40000003 syscall=229 success=yes exit=33 a0=4262e450 a1=402a6723 a2=41ea2278 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201111889.425:900): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1201111907.498:901): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6734 comm="okidecode" sig=11 >type=LABEL_LEVEL_CHANGE msg=audit(1201111940.984:902): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1201111954.051:903): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6763 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201112059.004:904): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6802 comm="okidecode" sig=11 >type=LABEL_LEVEL_CHANGE msg=audit(1201113086.951:905): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1201113101.240:906): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7134 comm="okidecode" sig=11 >type=LABEL_LEVEL_CHANGE msg=audit(1201113125.662:907): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1201113134.177:908): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7154 comm="okidecode" sig=11 >type=LABEL_LEVEL_CHANGE msg=audit(1201113260.074:909): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113260.080:910): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113260.084:911): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113260.088:912): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113260.092:913): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113260.097:914): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113260.100:915): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113260.103:916): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113260.106:917): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1201113282.647:918): user pid=6416 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201113297.177:919): user pid=7208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201113297.178:920): user pid=7208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201113297.188:921): user pid=7208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113347.596:922): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113347.603:923): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113347.607:924): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113347.611:925): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113347.615:926): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113347.618:927): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113347.621:928): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113347.625:929): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113347.628:930): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1201113355.635:931): user pid=7208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201113362.979:932): user pid=7246 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201113362.980:933): user pid=7246 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201113362.987:934): user pid=7246 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113370.802:935): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113370.807:936): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113370.810:937): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113370.813:938): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113370.816:939): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113370.820:940): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113370.823:941): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113370.826:942): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113370.829:943): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1201113824.602:944): user pid=7246 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201113836.372:945): user pid=7381 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201113836.372:946): user pid=7381 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201113836.381:947): user pid=7381 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113850.481:948): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113850.487:949): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113850.491:950): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113850.496:951): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113850.500:952): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113850.504:953): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113850.507:954): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113850.510:955): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201113850.514:956): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1201113961.556:957): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7437 comm="okidecode" sig=11 >type=LABEL_LEVEL_CHANGE msg=audit(1201114088.489:958): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1201114105.602:959): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7491 comm="okidecode" sig=11 >type=LABEL_LEVEL_CHANGE msg=audit(1201114118.985:960): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1201114131.378:961): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7503 comm="okidecode" sig=11 >type=USER_ACCT msg=audit(1201114861.802:962): user pid=7686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201114861.803:963): user pid=7686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201114861.803:964): login pid=7686 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201114861.809:965): user pid=7686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201114861.816:966): user pid=7686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201114861.817:967): user pid=7686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201116521.036:968): avc: denied { write } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201116521.036:968): arch=40000003 syscall=5 success=yes exit=18 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=ANOM_ABEND msg=audit(1201116585.269:969): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8165 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201116669.254:970): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8200 comm="okidecode" sig=11 >type=AVC msg=audit(1201116991.360:971): avc: denied { getattr } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201116991.360:971): arch=40000003 syscall=229 success=yes exit=33 a0=4262f1f8 a1=402a6723 a2=41ead370 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201116991.361:972): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201116991.376:973): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1201117008.402:974): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8322 comm="okidecode" sig=11 >type=LABEL_LEVEL_CHANGE msg=audit(1201117036.976:975): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201117036.992:976): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1201117055.722:977): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8347 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201118293.379:978): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=4048 comm="dbus-launch" sig=6 >type=USER_ACCT msg=audit(1201118461.830:979): user pid=9560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201118461.831:980): user pid=9560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201118461.831:981): login pid=9560 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201118461.839:982): user pid=9560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201118461.845:983): user pid=9560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201118461.845:984): user pid=9560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201119310.658:985): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9973 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201119434.148:986): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=10014 comm="okidecode" sig=11 >type=USER_ACCT msg=audit(1201122061.861:987): user pid=10842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201122061.862:988): user pid=10842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201122061.862:989): login pid=10842 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201122061.871:990): user pid=10842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201122061.877:991): user pid=10842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201122061.877:992): user pid=10842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201125661.892:993): user pid=11827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201125661.892:994): user pid=11827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201125661.893:995): login pid=11827 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201125661.901:996): user pid=11827 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201125661.907:997): user pid=11827 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201125661.907:998): user pid=11827 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201127645.940:999): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=12386 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201129261.921:1000): user pid=12875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201129261.922:1001): user pid=12875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201129261.922:1002): login pid=12875 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201129261.930:1003): user pid=12875 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201129261.935:1004): user pid=12875 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201129261.935:1005): user pid=12875 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201130444.813:1006): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201130444.828:1007): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201130477.684:1008): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1201130530.610:1009): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13312 comm="okidecode" sig=11 >type=USER_ACCT msg=audit(1201132861.951:1010): user pid=14472 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201132861.951:1011): user pid=14472 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201132861.952:1012): login pid=14472 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201132861.960:1013): user pid=14472 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201132861.965:1014): user pid=14472 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201132861.965:1015): user pid=14472 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201136461.980:1016): user pid=15439 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201136461.981:1017): user pid=15439 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201136461.981:1018): login pid=15439 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201136461.988:1019): user pid=15439 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201136461.993:1020): user pid=15439 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201136461.993:1021): user pid=15439 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201140061.007:1022): user pid=16411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201140061.008:1023): user pid=16411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201140061.008:1024): login pid=16411 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201140061.014:1025): user pid=16411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201140061.018:1026): user pid=16411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201140061.018:1027): user pid=16411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201143661.031:1028): user pid=17381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201143661.032:1029): user pid=17381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201143661.032:1030): login pid=17381 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201143661.039:1031): user pid=17381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201143661.044:1032): user pid=17381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201143661.044:1033): user pid=17381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201147261.057:1034): user pid=18377 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201147261.058:1035): user pid=18377 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201147261.058:1036): login pid=18377 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201147261.066:1037): user pid=18377 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201147261.071:1038): user pid=18377 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201147261.071:1039): user pid=18377 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201150861.085:1040): user pid=19354 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201150861.086:1041): user pid=19354 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201150861.086:1042): login pid=19354 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201150861.095:1043): user pid=19354 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201150861.100:1044): user pid=19354 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201150861.100:1045): user pid=19354 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201154461.114:1046): user pid=20339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201154461.114:1047): user pid=20339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201154461.114:1048): login pid=20339 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201154461.121:1049): user pid=20339 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201154461.126:1050): user pid=20339 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201154461.126:1051): user pid=20339 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201158061.140:1052): user pid=21302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201158061.140:1053): user pid=21302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201158061.141:1054): login pid=21302 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201158061.150:1055): user pid=21302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201158061.154:1056): user pid=21302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201158061.154:1057): user pid=21302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201161242.690:1058): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=22168 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201161265.866:1059): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=22173 comm="okidecode" sig=11 >type=ANOM_ABEND msg=audit(1201161533.525:1060): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=22267 comm="okidecode" sig=11 >type=USER_ACCT msg=audit(1201161661.168:1061): user pid=22302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201161661.168:1062): user pid=22302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201161661.169:1063): login pid=22302 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201161661.175:1064): user pid=22302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201161661.180:1065): user pid=22302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201161661.180:1066): user pid=22302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201162001.412:1067): avc: denied { write } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201162001.412:1067): arch=40000003 syscall=5 success=yes exit=18 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201162315.747:1068): avc: denied { getattr } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201162315.747:1068): arch=40000003 syscall=229 success=yes exit=33 a0=41e99b90 a1=402a6723 a2=426134c8 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201162315.748:1069): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201162418.507:1070): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1201165261.194:1071): user pid=23748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201165261.195:1072): user pid=23748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201165261.195:1073): login pid=23748 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201165261.203:1074): user pid=23748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201165261.208:1075): user pid=23748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201165261.208:1076): user pid=23748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201168861.222:1077): user pid=24731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201168861.223:1078): user pid=24731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201168861.223:1079): login pid=24731 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201168861.232:1080): user pid=24731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201168861.237:1081): user pid=24731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201168861.237:1082): user pid=24731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201168921.244:1083): user pid=24749 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201168921.245:1084): user pid=24749 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201168921.245:1085): login pid=24749 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201168921.253:1086): user pid=24749 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201169502.191:1087): user pid=24749 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201169502.192:1088): user pid=24749 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201172461.206:1089): user pid=26646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201172461.207:1090): user pid=26646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201172461.207:1091): login pid=26646 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201172461.215:1092): user pid=26646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201172461.220:1093): user pid=26646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201172461.221:1094): user pid=26646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201173601.230:1095): user pid=26911 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201173601.230:1096): user pid=26911 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201173601.231:1097): login pid=26911 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201173601.238:1098): user pid=26911 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201174201.401:1099): user pid=30866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201174201.402:1100): user pid=30866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201174201.402:1101): login pid=30866 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201174201.407:1102): user pid=30866 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201176061.730:1103): user pid=32194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201176061.731:1104): user pid=32194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201176061.731:1105): login pid=32194 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201176061.739:1106): user pid=32194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201176061.745:1107): user pid=32194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201176061.745:1108): user pid=32194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201178598.468:1109): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=530 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201179661.760:1110): user pid=819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201179661.761:1111): user pid=819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201179661.761:1112): login pid=819 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201179661.769:1113): user pid=819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201179661.774:1114): user pid=819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201179661.775:1115): user pid=819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201180501.783:1116): user pid=1044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201180501.783:1117): user pid=1044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201180501.784:1118): login pid=1044 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201180501.789:1119): user pid=1044 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201182688.800:1120): user pid=7381 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201182699.819:1121): user pid=1677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201182699.820:1122): user pid=1677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201182699.872:1123): user pid=1677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201182714.149:1124): avc: denied { getattr } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201182714.149:1124): arch=40000003 syscall=229 success=yes exit=33 a0=42613600 a1=402a6723 a2=4262bb98 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201182714.150:1125): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201182714.164:1126): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201182714.168:1127): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201182714.177:1128): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201182714.181:1129): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201182714.184:1130): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201182714.188:1131): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201182714.205:1132): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201182714.213:1133): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1201183261.730:1134): user pid=1849 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201183261.731:1135): user pid=1849 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201183261.731:1136): login pid=1849 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201183261.737:1137): user pid=1849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201183261.765:1138): user pid=1849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201183261.765:1139): user pid=1849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201186861.781:1140): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201186861.781:1141): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201186861.781:1142): login pid=3110 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201186861.791:1143): user pid=3110 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201186861.796:1144): user pid=3110 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201186861.796:1145): user pid=3110 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201190461.810:1146): user pid=18558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201190461.811:1147): user pid=18558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201190461.811:1148): login pid=18558 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201190461.816:1149): user pid=18558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201190461.821:1150): user pid=18558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201190461.821:1151): user pid=18558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201192581.492:1152): user pid=19188 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201192581.497:1153): user pid=19188 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201192581.544:1154): user pid=19188 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=LOGIN msg=audit(1201192581.545:1155): login pid=19188 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201192581.546:1156): user pid=19188 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201192581.548:1157): user pid=19192 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1201192582.032:1158): user pid=19188 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=USER_END msg=audit(1201192582.033:1159): user pid=19188 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)' >type=ANOM_ABEND msg=audit(1201192743.429:1160): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=1689 comm="dbus-launch" sig=6 >type=USER_ACCT msg=audit(1201194061.837:1161): user pid=19652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201194061.838:1162): user pid=19652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201194061.839:1163): login pid=19652 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201194061.847:1164): user pid=19652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201194061.853:1165): user pid=19652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201194061.854:1166): user pid=19652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201196538.196:1167): user pid=21024 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201196563.995:1168): user pid=21040 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201196701.881:1169): user pid=21078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201196701.882:1170): user pid=21078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201196701.882:1171): login pid=21078 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201196701.890:1172): user pid=21078 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201197661.439:1173): user pid=21456 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201197661.440:1174): user pid=21456 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201197661.440:1175): login pid=21456 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201197661.446:1176): user pid=21456 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201197661.452:1177): user pid=21456 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201197661.452:1178): user pid=21456 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201198501.461:1179): user pid=21685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201198501.461:1180): user pid=21685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201198501.461:1181): login pid=21685 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201198501.469:1182): user pid=21685 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201200301.986:1183): user pid=22227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201200301.987:1184): user pid=22227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201200301.987:1185): login pid=22227 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201200301.994:1186): user pid=22227 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201201261.781:1187): user pid=22577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201201261.782:1188): user pid=22577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201201261.782:1189): login pid=22577 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201201261.790:1190): user pid=22577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201201261.794:1191): user pid=22577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201201261.794:1192): user pid=22577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201201721.597:1193): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4759 comm="firefox-bin" sig=6 >type=USER_ACCT msg=audit(1201202101.804:1194): user pid=22917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201202101.804:1195): user pid=22917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201202101.804:1196): login pid=22917 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201202101.812:1197): user pid=22917 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201203901.248:1198): user pid=23497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201203901.248:1199): user pid=23497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201203901.249:1200): login pid=23497 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201203901.255:1201): user pid=23497 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201204861.221:1202): user pid=23847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201204861.221:1203): user pid=23847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201204861.222:1204): login pid=23847 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201204861.226:1205): user pid=23847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201204861.231:1206): user pid=23847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201204861.231:1207): user pid=23847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201204891.405:1208): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=23860 comm="f-spot" sig=6 >type=USER_END msg=audit(1201205623.067:1209): user pid=1677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201205701.241:1210): user pid=24189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201205701.241:1211): user pid=24189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201205701.242:1212): login pid=24189 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201205701.249:1213): user pid=24189 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201207501.247:1214): user pid=25125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201207501.247:1215): user pid=25125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201207501.248:1216): login pid=25125 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201207501.253:1217): user pid=25125 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201208461.131:1218): user pid=25431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201208461.131:1219): user pid=25431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201208461.131:1220): login pid=25431 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201208461.140:1221): user pid=25431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201208461.145:1222): user pid=25431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201208461.145:1223): user pid=25431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201209301.154:1224): user pid=25660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201209301.154:1225): user pid=25660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201209301.155:1226): login pid=25660 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201209301.160:1227): user pid=25660 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201211101.200:1228): user pid=26103 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201211101.201:1229): user pid=26103 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201211101.202:1230): login pid=26103 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201211101.209:1231): user pid=26103 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201212061.647:1232): user pid=26424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201212061.647:1233): user pid=26424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201212061.647:1234): login pid=26424 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201212061.653:1235): user pid=26424 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201212061.658:1236): user pid=26424 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201212061.658:1237): user pid=26424 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201212901.668:1238): user pid=26704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201212901.668:1239): user pid=26704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201212901.668:1240): login pid=26704 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201212901.675:1241): user pid=26704 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201214701.643:1242): user pid=27499 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201214701.644:1243): user pid=27499 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201214701.644:1244): login pid=27499 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201214701.652:1245): user pid=27499 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201215661.539:1246): user pid=27814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201215661.540:1247): user pid=27814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201215661.540:1248): login pid=27814 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201215661.550:1249): user pid=27814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201215661.554:1250): user pid=27814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201215661.554:1251): user pid=27814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201216501.563:1252): user pid=28046 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201216501.563:1253): user pid=28046 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201216501.564:1254): login pid=28046 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201216501.571:1255): user pid=28046 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201217240.295:1256): user pid=28302 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201217240.295:1257): user pid=28302 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201217240.324:1258): user pid=28302 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201217422.557:1259): user pid=28368 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201217422.587:1260): user pid=28369 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201217422.589:1261): user pid=28370 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201217422.591:1262): user pid=28371 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_END msg=audit(1201217946.018:1263): user pid=28302 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201218301.190:1264): user pid=31319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201218301.190:1265): user pid=31319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201218301.191:1266): login pid=31319 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201218301.196:1267): user pid=31319 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201219261.856:1268): user pid=31621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201219261.857:1269): user pid=31621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201219261.857:1270): login pid=31621 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201219261.865:1271): user pid=31621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201219261.871:1272): user pid=31621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201219261.871:1273): user pid=31621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201220101.880:1274): user pid=31856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201220101.880:1275): user pid=31856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201220101.880:1276): login pid=31856 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201220101.887:1277): user pid=31856 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201221901.877:1278): user pid=32383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201221901.878:1279): user pid=32383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201221901.878:1280): login pid=32383 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201221901.887:1281): user pid=32383 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201222861.193:1282): user pid=32684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201222861.193:1283): user pid=32684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201222861.193:1284): login pid=32684 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201222861.200:1285): user pid=32684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201222861.205:1286): user pid=32684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201222861.205:1287): user pid=32684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201223701.214:1288): user pid=447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201223701.214:1289): user pid=447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201223701.215:1290): login pid=447 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201223701.220:1291): user pid=447 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201225501.523:1292): user pid=990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201225501.524:1293): user pid=990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201225501.524:1294): login pid=990 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201225501.532:1295): user pid=990 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201226461.441:1296): user pid=1290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201226461.442:1297): user pid=1290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201226461.442:1298): login pid=1290 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201226461.449:1299): user pid=1290 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201226461.453:1300): user pid=1290 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201226461.454:1301): user pid=1290 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201227301.462:1302): user pid=1524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201227301.462:1303): user pid=1524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201227301.463:1304): login pid=1524 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201227301.471:1305): user pid=1524 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201229101.701:1306): user pid=2073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201229101.701:1307): user pid=2073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201229101.701:1308): login pid=2073 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201229101.707:1309): user pid=2073 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201230061.426:1310): user pid=2532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201230061.427:1311): user pid=2532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201230061.427:1312): login pid=2532 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201230061.434:1313): user pid=2532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201230061.439:1314): user pid=2532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201230061.439:1315): user pid=2532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201230901.448:1316): user pid=2872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201230901.448:1317): user pid=2872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201230901.448:1318): login pid=2872 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201230901.457:1319): user pid=2872 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201230978.777:1320): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2939 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201232701.751:1321): user pid=3463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201232701.752:1322): user pid=3463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201232701.752:1323): login pid=3463 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201232701.760:1324): user pid=3463 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201233661.097:1325): user pid=3786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201233661.097:1326): user pid=3786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201233661.097:1327): login pid=3786 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201233661.105:1328): user pid=3786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201233661.110:1329): user pid=3786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201233661.110:1330): user pid=3786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201234501.119:1331): user pid=4021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201234501.120:1332): user pid=4021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201234501.120:1333): login pid=4021 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201234501.125:1334): user pid=4021 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201236301.802:1335): user pid=4568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201236301.803:1336): user pid=4568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201236301.803:1337): login pid=4568 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201236301.811:1338): user pid=4568 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201237261.579:1339): user pid=4873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201237261.580:1340): user pid=4873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201237261.580:1341): login pid=4873 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201237261.587:1342): user pid=4873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201237261.592:1343): user pid=4873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201237261.593:1344): user pid=4873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201238101.601:1345): user pid=5108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201238101.601:1346): user pid=5108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201238101.602:1347): login pid=5108 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201238101.610:1348): user pid=5108 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201239901.550:1349): user pid=5636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201239901.551:1350): user pid=5636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201239901.551:1351): login pid=5636 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201239901.559:1352): user pid=5636 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201240861.825:1353): user pid=5937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201240861.825:1354): user pid=5937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201240861.825:1355): login pid=5937 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201240861.833:1356): user pid=5937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201240861.838:1357): user pid=5937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201240861.838:1358): user pid=5937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201241701.847:1359): user pid=6163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201241701.847:1360): user pid=6163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201241701.847:1361): login pid=6163 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201241701.855:1362): user pid=6163 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201243501.268:1363): user pid=6688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201243501.268:1364): user pid=6688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201243501.269:1365): login pid=6688 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201243501.278:1366): user pid=6688 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201244461.424:1367): user pid=6985 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201244461.425:1368): user pid=6985 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201244461.425:1369): login pid=6985 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201244461.430:1370): user pid=6985 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201244461.435:1371): user pid=6985 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201244461.435:1372): user pid=6985 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201245301.444:1373): user pid=7245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201245301.444:1374): user pid=7245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201245301.444:1375): login pid=7245 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201245301.453:1376): user pid=7245 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201247101.497:1377): user pid=7835 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201247101.498:1378): user pid=7835 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201247101.498:1379): login pid=7835 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201247101.506:1380): user pid=7835 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201248061.040:1381): user pid=8576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201248061.041:1382): user pid=8576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201248061.041:1383): login pid=8576 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201248061.050:1384): user pid=8576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201248061.054:1385): user pid=8576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201248061.054:1386): user pid=8576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201248901.063:1387): user pid=8836 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201248901.064:1388): user pid=8836 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201248901.064:1389): login pid=8836 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201248901.070:1390): user pid=8836 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201249801.757:1391): user pid=9157 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201249801.757:1392): user pid=9157 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201249801.758:1393): login pid=9157 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201249801.766:1394): user pid=9157 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201249814.065:1395): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9172 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201250701.757:1396): user pid=6459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201250701.758:1397): user pid=6459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201250701.758:1398): login pid=6459 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201250701.764:1399): user pid=6459 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201251661.441:1400): user pid=5658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201251661.442:1401): user pid=5658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201251661.442:1402): login pid=5658 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201251661.447:1403): user pid=5658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201251661.453:1404): user pid=5658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201251661.454:1405): user pid=5658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201252501.461:1406): user pid=1532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201252501.461:1407): user pid=1532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201252501.461:1408): login pid=1532 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201252501.467:1409): user pid=1532 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201254301.935:1410): user pid=2238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201254301.936:1411): user pid=2238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201254301.936:1412): login pid=2238 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201254301.943:1413): user pid=2238 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201255261.374:1414): user pid=2581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201255261.375:1415): user pid=2581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201255261.376:1416): login pid=2581 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201255261.383:1417): user pid=2581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201255261.389:1418): user pid=2581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201255261.389:1419): user pid=2581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201255321.396:1420): user pid=2599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201255321.397:1421): user pid=2599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201255321.397:1422): login pid=2599 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201255321.405:1423): user pid=2599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201255857.375:1424): user pid=2599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201255857.376:1425): user pid=2599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201256101.385:1426): user pid=4163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201256101.385:1427): user pid=4163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201256101.386:1428): login pid=4163 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201256101.392:1429): user pid=4163 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201257901.306:1430): user pid=4709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201257901.307:1431): user pid=4709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201257901.307:1432): login pid=4709 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201257901.313:1433): user pid=4709 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201258861.539:1434): user pid=5011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201258861.539:1435): user pid=5011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201258861.540:1436): login pid=5011 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201258861.547:1437): user pid=5011 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201258861.552:1438): user pid=5011 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201258861.552:1439): user pid=5011 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201259701.560:1440): user pid=5241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201259701.561:1441): user pid=5241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201259701.561:1442): login pid=5241 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201259701.569:1443): user pid=5241 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201260001.037:1444): user pid=5367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201260001.037:1445): user pid=5367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201260001.038:1446): login pid=5367 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201260001.044:1447): user pid=5367 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201260601.080:1448): user pid=9292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201260601.080:1449): user pid=9292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201260601.080:1450): login pid=9292 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201260601.087:1451): user pid=9292 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201261501.242:1452): user pid=10352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201261501.242:1453): user pid=10352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201261501.243:1454): login pid=10352 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201261501.250:1455): user pid=10352 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201262461.611:1456): user pid=10718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201262461.611:1457): user pid=10718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201262461.612:1458): login pid=10718 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201262461.618:1459): user pid=10718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201262461.623:1460): user pid=10718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201262461.623:1461): user pid=10718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201263301.631:1462): user pid=10953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201263301.632:1463): user pid=10953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201263301.632:1464): login pid=10953 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201263301.639:1465): user pid=10953 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201265101.804:1466): user pid=11595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201265101.805:1467): user pid=11595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201265101.805:1468): login pid=11595 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201265101.813:1469): user pid=11595 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201265623.762:1470): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=11786 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201266061.879:1471): user pid=11904 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201266061.880:1472): user pid=11904 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201266061.880:1473): login pid=11904 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201266061.888:1474): user pid=11904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201266061.892:1475): user pid=11904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201266061.893:1476): user pid=11904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201266901.902:1477): user pid=12134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201266901.902:1478): user pid=12133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201266901.903:1479): user pid=12133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201266901.903:1480): login pid=12133 uid=0 old auid=4294967295 new auid=500 >type=CRED_ACQ msg=audit(1201266901.904:1481): user pid=12134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201266901.904:1482): login pid=12134 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201266901.911:1483): user pid=12133 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1201266901.913:1484): user pid=12134 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201268701.393:1485): user pid=12694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201268701.425:1486): user pid=12694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201268701.425:1487): login pid=12694 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201268701.429:1488): user pid=12694 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201269661.116:1489): user pid=13000 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201269661.116:1490): user pid=13000 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201269661.116:1491): login pid=13000 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201269661.125:1492): user pid=13000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201269661.232:1493): user pid=13000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201269661.233:1494): user pid=13000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201269797.397:1495): user pid=13071 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201269797.397:1496): user pid=13071 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201269797.537:1497): user pid=13071 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201269807.489:1498): user pid=13071 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201270327.344:1499): user pid=13315 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_ACCT msg=audit(1201270327.348:1500): user pid=13315 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_START msg=audit(1201270327.364:1501): user pid=13315 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_ACQ msg=audit(1201270327.392:1502): user pid=13315 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=CRED_DISP msg=audit(1201270431.350:1503): user pid=13315 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_END msg=audit(1201270431.351:1504): user pid=13315 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)' >type=USER_ACCT msg=audit(1201270501.243:1505): user pid=13408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201270501.243:1506): user pid=13408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201270501.244:1507): login pid=13408 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201270501.250:1508): user pid=13408 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201272301.475:1509): user pid=14053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201272301.476:1510): user pid=14053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201272301.476:1511): login pid=14053 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201272301.482:1512): user pid=14053 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201273261.631:1513): user pid=14384 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201273261.631:1514): user pid=14384 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201273261.631:1515): login pid=14384 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201273261.640:1516): user pid=14384 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201273261.646:1517): user pid=14384 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201273261.646:1518): user pid=14384 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201274101.655:1519): user pid=14625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201274101.655:1520): user pid=14625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201274101.655:1521): login pid=14625 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201274101.663:1522): user pid=14625 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201275901.851:1523): user pid=15176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201275901.851:1524): user pid=15176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201275901.852:1525): login pid=15176 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201275901.858:1526): user pid=15176 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201276172.142:1527): avc: denied { getattr } for pid=18012 comm="httpd" path="/home/rick/photos/catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1201276172.142:1527): arch=40000003 syscall=196 success=yes exit=0 a0=bfd75748 a1=bfd7569c a2=52bff4 a3=171 items=0 ppid=2681 pid=18012 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1201276172.143:1528): avc: denied { read } for pid=18012 comm="httpd" name="catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1201276172.143:1528): arch=40000003 syscall=5 success=yes exit=18 a0=b990e258 a1=8000 a2=1b6 a3=8000 items=0 ppid=2681 pid=18012 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1201276174.122:1529): avc: denied { getattr } for pid=18012 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=47710275 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1201276174.122:1529): arch=40000003 syscall=196 success=yes exit=0 a0=bfd75748 a1=bfd7569c a2=52bff4 a3=171 items=0 ppid=2681 pid=18012 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201276861.628:1530): user pid=15478 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201276861.629:1531): user pid=15478 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201276861.629:1532): login pid=15478 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201276861.639:1533): user pid=15478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201276861.645:1534): user pid=15478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201276861.645:1535): user pid=15478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201277701.654:1536): user pid=15709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201277701.655:1537): user pid=15709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201277701.655:1538): login pid=15709 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201277701.660:1539): user pid=15709 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201279501.047:1540): user pid=16239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201279501.047:1541): user pid=16239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201279501.047:1542): login pid=16239 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201279501.054:1543): user pid=16239 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201280461.319:1544): user pid=16547 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201280461.320:1545): user pid=16547 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201280461.320:1546): login pid=16547 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201280461.328:1547): user pid=16547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201280461.333:1548): user pid=16547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201280461.333:1549): user pid=16547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201281301.341:1550): user pid=16772 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201281301.342:1551): user pid=16772 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201281301.342:1552): login pid=16772 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201281301.350:1553): user pid=16772 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201283101.506:1554): user pid=17299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201283101.507:1555): user pid=17299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201283101.507:1556): login pid=17299 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201283101.514:1557): user pid=17299 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201284061.553:1558): user pid=17597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201284061.553:1559): user pid=17597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201284061.553:1560): login pid=17597 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201284061.561:1561): user pid=17597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201284061.566:1562): user pid=17597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201284061.566:1563): user pid=17597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201284901.574:1564): user pid=17825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201284901.575:1565): user pid=17825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201284901.575:1566): login pid=17825 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201284901.580:1567): user pid=17825 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201286701.302:1568): user pid=18381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201286701.302:1569): user pid=18381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201286701.303:1570): login pid=18381 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201286701.311:1571): user pid=18381 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201287661.806:1572): user pid=18680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201287661.807:1573): user pid=18680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201287661.807:1574): login pid=18680 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201287661.812:1575): user pid=18680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201287661.817:1576): user pid=18680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201287661.817:1577): user pid=18680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201288004.775:1578): avc: denied { write } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201288004.775:1578): arch=40000003 syscall=5 success=yes exit=19 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1201288066.803:1579): user pid=20390 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201288066.803:1580): user pid=20390 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201288066.813:1581): user pid=20390 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201288188.812:1582): avc: denied { getattr } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201288188.812:1582): arch=40000003 syscall=229 success=yes exit=33 a0=42637e90 a1=402a6723 a2=42618678 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201288188.813:1583): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1201288501.829:1584): user pid=20558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201288501.830:1585): user pid=20558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201288501.830:1586): login pid=20558 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201288501.837:1587): user pid=20558 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201290301.042:1588): user pid=21216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201290301.044:1589): user pid=21216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201290301.044:1590): login pid=21216 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201290301.051:1591): user pid=21216 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201291261.747:1592): user pid=21558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201291261.748:1593): user pid=21558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201291261.748:1594): login pid=21558 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201291261.753:1595): user pid=21558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201291261.759:1596): user pid=21558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201291261.760:1597): user pid=21558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201292101.768:1598): user pid=21789 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201292101.769:1599): user pid=21789 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201292101.769:1600): login pid=21789 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201292101.777:1601): user pid=21789 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201293901.121:1602): user pid=22348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201293901.122:1603): user pid=22348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201293901.123:1604): login pid=22348 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201293901.129:1605): user pid=22348 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201294861.491:1606): user pid=22666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201294861.491:1607): user pid=22666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201294861.492:1608): login pid=22666 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201294861.497:1609): user pid=22666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201294861.502:1610): user pid=22666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201294861.502:1611): user pid=22666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201295701.511:1612): user pid=22907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201295701.511:1613): user pid=22907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201295701.512:1614): login pid=22907 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201295701.520:1615): user pid=22907 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201297501.401:1616): user pid=23438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201297501.402:1617): user pid=23438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201297501.402:1618): login pid=23438 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201297501.410:1619): user pid=23438 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201298461.893:1620): user pid=23742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201298461.893:1621): user pid=23742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201298461.893:1622): login pid=23742 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201298461.900:1623): user pid=23742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201298461.905:1624): user pid=23742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201298461.906:1625): user pid=23742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201299301.914:1626): user pid=23984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201299301.915:1627): user pid=23984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201299301.915:1628): login pid=23984 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201299301.923:1629): user pid=23984 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201301101.019:1630): user pid=24719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201301101.020:1631): user pid=24719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201301101.020:1632): login pid=24719 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201301101.026:1633): user pid=24719 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201302061.651:1634): user pid=25189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201302061.652:1635): user pid=25189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201302061.652:1636): login pid=25189 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201302061.659:1637): user pid=25189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201302061.664:1638): user pid=25189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201302061.664:1639): user pid=25189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201302901.672:1640): user pid=25581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201302901.672:1641): user pid=25581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201302901.673:1642): login pid=25581 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201302901.678:1643): user pid=25581 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201304701.872:1644): user pid=26353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201304701.873:1645): user pid=26353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201304701.873:1646): login pid=26353 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201304701.880:1647): user pid=26353 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201305661.272:1648): user pid=26652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201305661.273:1649): user pid=26652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201305661.273:1650): login pid=26652 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201305661.280:1651): user pid=26652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201305661.285:1652): user pid=26652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201305661.285:1653): user pid=26652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201306501.294:1654): user pid=26906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201306501.294:1655): user pid=26906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201306501.295:1656): login pid=26906 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201306501.302:1657): user pid=26906 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201307368.347:1658): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=27692 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1201307669.238:1659): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=20400 comm="dbus-launch" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1201308252.959:1660): dev=eth0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1201308252.959:1660): arch=40000003 syscall=5 per=400000 success=yes exit=174 a0=bf81d432 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=28006 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_ACCT msg=audit(1201308301.687:1661): user pid=28024 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201308301.688:1662): user pid=28024 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201308301.688:1663): login pid=28024 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201308301.696:1664): user pid=28024 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201308902.201:1665): avc: denied { search } for pid=28249 comm="smbd" name="home" dev=dm-0 ino=23166977 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=AVC msg=audit(1201308902.201:1665): avc: denied { getattr } for pid=28249 comm="smbd" path="/home/rick" dev=dm-0 ino=23265282 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201308902.201:1665): arch=40000003 syscall=195 success=yes exit=0 a0=b9c034d8 a1=bff3eeb0 a2=4c8ff4 a3=bff3eeb0 items=0 ppid=2802 pid=28249 auid=4294967295 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=AVC msg=audit(1201308902.233:1666): avc: denied { read } for pid=28249 comm="smbd" name="rick" dev=dm-0 ino=23265282 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1201308902.233:1666): arch=40000003 syscall=5 success=yes exit=25 a0=b9befc30 a1=98800 a2=37cd9c a3=b9beee70 items=0 ppid=2802 pid=28249 auid=4294967295 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201309261.488:1667): user pid=28351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201309261.488:1668): user pid=28351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201309261.489:1669): login pid=28351 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201309261.496:1670): user pid=28351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201309261.502:1671): user pid=28351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201309261.502:1672): user pid=28351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1201309586.797:1673): dev=eth0 prom=0 old_prom=256 auid=500 >type=SYSCALL msg=audit(1201309586.797:1673): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=ae a1=0 a2=bf81d9ec a3=9ffd180 items=0 ppid=1 pid=28006 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_ACCT msg=audit(1201310101.511:1674): user pid=28622 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201310101.511:1675): user pid=28622 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201310101.511:1676): login pid=28622 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201310101.516:1677): user pid=28622 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201310700.857:1678): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28842 comm="gs" sig=11 >type=ANOM_ABEND msg=audit(1201310764.592:1679): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28900 comm="gs854" sig=11 >type=ANOM_ABEND msg=audit(1201310890.020:1680): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28951 comm="gs.cur" sig=11 >type=ANOM_ABEND msg=audit(1201311325.276:1681): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=1207 comm="gs.cur" sig=11 >type=USER_ACCT msg=audit(1201311901.543:1682): user pid=16343 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201311901.543:1683): user pid=16343 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201311901.543:1684): login pid=16343 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201311901.551:1685): user pid=16343 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201311938.492:1686): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16409 comm="gs.cur" sig=11 >type=ANOM_ABEND msg=audit(1201312057.792:1687): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16451 comm="gs861" sig=11 >type=ANOM_ABEND msg=audit(1201312064.979:1688): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16452 comm="gs.cur" sig=11 >type=USER_ACCT msg=audit(1201312861.896:1689): user pid=16673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201312861.897:1690): user pid=16673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201312861.897:1691): login pid=16673 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201312861.905:1692): user pid=16673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201312861.910:1693): user pid=16673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201312861.911:1694): user pid=16673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201313701.919:1695): user pid=16909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201313701.919:1696): user pid=16909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201313701.919:1697): login pid=16909 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201313701.925:1698): user pid=16909 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201315501.346:1699): user pid=17459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201315501.346:1700): user pid=17459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201315501.347:1701): login pid=17459 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201315501.353:1702): user pid=17459 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201316461.762:1703): user pid=17761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201316461.763:1704): user pid=17761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201316461.763:1705): login pid=17761 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201316461.770:1706): user pid=17761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201316461.775:1707): user pid=17761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201316461.775:1708): user pid=17761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201317301.784:1709): user pid=17990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201317301.784:1710): user pid=17990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201317301.784:1711): login pid=17990 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201317301.791:1712): user pid=17990 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201318390.775:1713): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18407 comm="gs.cur" sig=11 >type=ANOM_ABEND msg=audit(1201318422.626:1714): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18418 comm="gs.cur" sig=11 >type=ANOM_ABEND msg=audit(1201318573.394:1715): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18466 comm="gs.cur" sig=11 >type=USER_ACCT msg=audit(1201319101.532:1716): user pid=18728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201319101.532:1717): user pid=18728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201319101.533:1718): login pid=18728 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201319101.540:1719): user pid=18728 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201320061.496:1720): user pid=19137 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201320061.497:1721): user pid=19137 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201320061.497:1722): login pid=19137 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201320061.504:1723): user pid=19137 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201320061.511:1724): user pid=19137 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201320061.511:1725): user pid=19137 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201320703.877:1726): avc: denied { getattr } for pid=18012 comm="httpd" path="/home/rick/photos/catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1201320703.877:1726): arch=40000003 syscall=196 success=yes exit=0 a0=bfd75748 a1=bfd7569c a2=52bff4 a3=171 items=0 ppid=2681 pid=18012 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1201320703.877:1727): avc: denied { read } for pid=18012 comm="httpd" name="catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1201320703.877:1727): arch=40000003 syscall=5 success=yes exit=18 a0=b9902210 a1=8000 a2=1b6 a3=8000 items=0 ppid=2681 pid=18012 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1201320705.381:1728): avc: denied { getattr } for pid=18011 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=47710275 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file >type=SYSCALL msg=audit(1201320705.381:1728): arch=40000003 syscall=196 success=yes exit=0 a0=bfd75748 a1=bfd7569c a2=52bff4 a3=171 items=0 ppid=2681 pid=18011 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1201320776.674:1729): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19358 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201320901.520:1730): user pid=19393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201320901.520:1731): user pid=19393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201320901.521:1732): login pid=19393 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201320901.528:1733): user pid=19393 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201322701.779:1734): user pid=19942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201322701.780:1735): user pid=19942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201322701.780:1736): login pid=19942 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201322701.786:1737): user pid=19942 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201323661.749:1738): user pid=20241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201323661.750:1739): user pid=20241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201323661.750:1740): login pid=20241 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201323661.756:1741): user pid=20241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201323661.762:1742): user pid=20241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201323661.762:1743): user pid=20241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201324501.771:1744): user pid=20475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201324501.771:1745): user pid=20475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201324501.772:1746): login pid=20475 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201324501.779:1747): user pid=20475 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201326301.100:1748): user pid=21011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201326301.101:1749): user pid=21011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201326301.101:1750): login pid=21011 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201326301.107:1751): user pid=21011 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201327261.513:1752): user pid=21325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201327261.513:1753): user pid=21325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201327261.513:1754): login pid=21325 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201327261.520:1755): user pid=21325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201327261.525:1756): user pid=21325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201327261.525:1757): user pid=21325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201328101.533:1758): user pid=21553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201328101.534:1759): user pid=21553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201328101.534:1760): login pid=21553 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201328101.542:1761): user pid=21553 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201329901.890:1762): user pid=22124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201329901.891:1763): user pid=22124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201329901.891:1764): login pid=22124 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201329901.899:1765): user pid=22124 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201330861.242:1766): user pid=22631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201330861.242:1767): user pid=22631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201330861.243:1768): login pid=22631 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201330861.250:1769): user pid=22631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201330861.256:1770): user pid=22631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201330861.256:1771): user pid=22631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201331701.265:1772): user pid=22887 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201331701.265:1773): user pid=22887 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201331701.265:1774): login pid=22887 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201331701.272:1775): user pid=22887 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201333501.079:1776): user pid=23423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201333501.080:1777): user pid=23423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201333501.080:1778): login pid=23423 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201333501.086:1779): user pid=23423 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201334461.150:1780): user pid=23722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201334461.151:1781): user pid=23722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201334461.151:1782): login pid=23722 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201334461.156:1783): user pid=23722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201334461.161:1784): user pid=23722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201334461.161:1785): user pid=23722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201335301.169:1786): user pid=23950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201335301.170:1787): user pid=23950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201335301.170:1788): login pid=23950 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201335301.177:1789): user pid=23950 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201337101.195:1790): user pid=24486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201337101.195:1791): user pid=24486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201337101.195:1792): login pid=24486 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201337101.202:1793): user pid=24486 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201338061.808:1794): user pid=24785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201338061.808:1795): user pid=24785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201338061.808:1796): login pid=24785 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201338061.817:1797): user pid=24785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201338061.822:1798): user pid=24785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201338061.822:1799): user pid=24785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201338901.830:1800): user pid=25012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201338901.831:1801): user pid=25012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201338901.831:1802): login pid=25012 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201338901.838:1803): user pid=25012 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201340701.051:1804): user pid=25616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201340701.051:1805): user pid=25616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201340701.052:1806): login pid=25616 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201340701.059:1807): user pid=25616 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201341661.893:1808): user pid=26086 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201341661.893:1809): user pid=26086 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201341661.894:1810): login pid=26086 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201341661.899:1811): user pid=26086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201341661.904:1812): user pid=26086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201341661.905:1813): user pid=26086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201341721.911:1814): user pid=26106 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201341721.912:1815): user pid=26106 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201341721.912:1816): login pid=26106 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201341721.921:1817): user pid=26106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201342331.922:1818): user pid=26106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201342331.923:1819): user pid=26106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201342501.931:1820): user pid=27227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201342501.932:1821): user pid=27227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201342501.932:1822): login pid=27227 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201342501.937:1823): user pid=27227 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201344301.645:1824): user pid=27758 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201344301.670:1825): user pid=27758 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201344301.670:1826): login pid=27758 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201344301.675:1827): user pid=27758 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201345261.302:1828): user pid=28060 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201345261.303:1829): user pid=28060 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201345261.303:1830): login pid=28060 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201345261.310:1831): user pid=28060 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201345261.314:1832): user pid=28060 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201345261.314:1833): user pid=28060 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201346101.323:1834): user pid=28291 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201346101.323:1835): user pid=28291 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201346101.324:1836): login pid=28291 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201346101.331:1837): user pid=28291 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201346401.955:1838): user pid=28415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201346401.956:1839): user pid=28415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201346401.956:1840): login pid=28415 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201346401.963:1841): user pid=28415 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201347001.566:1842): user pid=31989 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201347001.567:1843): user pid=31989 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201347001.567:1844): login pid=31989 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201347001.572:1845): user pid=31989 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201347901.469:1846): user pid=629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201347901.469:1847): user pid=629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201347901.470:1848): login pid=629 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201347901.477:1849): user pid=629 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201348861.597:1850): user pid=2004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201348861.598:1851): user pid=2004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201348861.598:1852): login pid=2004 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201348861.606:1853): user pid=2004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201348861.611:1854): user pid=2004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201348861.611:1855): user pid=2004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201349701.620:1856): user pid=2247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201349701.620:1857): user pid=2247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201349701.620:1858): login pid=2247 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201349701.626:1859): user pid=2247 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201350473.650:1860): user pid=2593 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201350473.650:1861): user pid=2593 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201350473.692:1862): user pid=2593 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201350492.773:1863): user pid=2593 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201351501.319:1864): user pid=3457 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201351501.320:1865): user pid=3457 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201351501.320:1866): login pid=3457 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201351501.326:1867): user pid=3457 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201352461.269:1868): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201352461.269:1869): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201352461.269:1870): login pid=3793 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201352461.276:1871): user pid=3793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201352461.281:1872): user pid=3793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201352461.281:1873): user pid=3793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201353301.290:1874): user pid=4098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201353301.291:1875): user pid=4099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201353301.291:1876): user pid=4099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201353301.291:1877): login pid=4099 uid=0 old auid=4294967295 new auid=500 >type=CRED_ACQ msg=audit(1201353301.292:1878): user pid=4098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201353301.292:1879): login pid=4098 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201353301.299:1880): user pid=4098 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1201353301.300:1881): user pid=4099 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201355101.890:1882): user pid=4674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201355101.890:1883): user pid=4674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201355101.890:1884): login pid=4674 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201355101.897:1885): user pid=4674 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201356061.028:1886): user pid=4987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201356061.029:1887): user pid=4987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201356061.029:1888): login pid=4987 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201356061.036:1889): user pid=4987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201356061.062:1890): user pid=4987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201356061.062:1891): user pid=4987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201356901.070:1892): user pid=5222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201356901.071:1893): user pid=5222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201356901.071:1894): login pid=5222 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201356901.076:1895): user pid=5222 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201358701.598:1896): user pid=5762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201358701.598:1897): user pid=5762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201358701.598:1898): login pid=5762 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201358701.604:1899): user pid=5762 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201359661.674:1900): user pid=6064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201359661.674:1901): user pid=6064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201359661.674:1902): login pid=6064 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201359661.683:1903): user pid=6064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201359661.689:1904): user pid=6064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201359661.689:1905): user pid=6064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201360501.698:1906): user pid=6292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201360501.698:1907): user pid=6292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201360501.699:1908): login pid=6292 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201360501.706:1909): user pid=6292 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201362301.063:1910): user pid=6930 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201362301.064:1911): user pid=6930 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201362301.064:1912): login pid=6930 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201362301.072:1913): user pid=6930 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201363261.237:1914): user pid=7239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201363261.238:1915): user pid=7239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201363261.238:1916): login pid=7239 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201363261.245:1917): user pid=7239 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201363261.250:1918): user pid=7239 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201363261.250:1919): user pid=7239 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201364101.259:1920): user pid=7473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201364101.259:1921): user pid=7473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201364101.260:1922): login pid=7473 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201364101.267:1923): user pid=7473 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201365901.292:1924): user pid=8005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201365901.292:1925): user pid=8005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201365901.293:1926): login pid=8005 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201365901.300:1927): user pid=8005 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201366861.201:1928): user pid=8325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201366861.202:1929): user pid=8325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201366861.202:1930): login pid=8325 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201366861.208:1931): user pid=8325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201366861.213:1932): user pid=8325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201366861.213:1933): user pid=8325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201367701.221:1934): user pid=8563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201367701.222:1935): user pid=8563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201367701.222:1936): login pid=8563 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201367701.230:1937): user pid=8563 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201368317.613:1938): avc: denied { search } for pid=8779 comm="CID.cgi" name=".tkcid" dev=dm-0 ino=23625733 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir >type=AVC msg=audit(1201368317.613:1938): avc: denied { read } for pid=8779 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201368317.613:1938): arch=40000003 syscall=5 success=yes exit=3 a0=9b0bc18 a1=8000 a2=0 a3=8000 items=0 ppid=18015 pid=8779 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1201368317.613:1939): avc: denied { ioctl } for pid=8779 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201368317.613:1939): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bf95b6a8 a3=bf95b6e8 items=0 ppid=18015 pid=8779 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=AVC msg=audit(1201368317.613:1940): avc: denied { getattr } for pid=8779 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201368317.613:1940): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=9aef068 a2=776ff4 a3=9b05818 items=0 ppid=18015 pid=8779 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null) >type=USER_ACCT msg=audit(1201369501.645:1941): user pid=9134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201369501.646:1942): user pid=9134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201369501.646:1943): login pid=9134 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201369501.654:1944): user pid=9134 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201370461.806:1945): user pid=9438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201370461.806:1946): user pid=9438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201370461.807:1947): login pid=9438 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201370461.815:1948): user pid=9438 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201370461.820:1949): user pid=9438 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201370461.820:1950): user pid=9438 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201371301.829:1951): user pid=9667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201371301.829:1952): user pid=9667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201371301.830:1953): login pid=9667 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201371301.835:1954): user pid=9667 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201373101.088:1955): user pid=10209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201373101.089:1956): user pid=10209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201373101.089:1957): login pid=10209 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201373101.095:1958): user pid=10209 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201374061.541:1959): user pid=10509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201374061.542:1960): user pid=10509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201374061.542:1961): login pid=10509 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201374061.548:1962): user pid=10509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201374061.553:1963): user pid=10509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201374061.553:1964): user pid=10509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201374901.562:1965): user pid=10746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201374901.563:1966): user pid=10746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201374901.563:1967): login pid=10746 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201374901.571:1968): user pid=10746 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201376701.614:1969): user pid=11289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201376701.614:1970): user pid=11289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201376701.615:1971): login pid=11289 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201376701.620:1972): user pid=11289 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201377661.972:1973): user pid=11590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201377661.972:1974): user pid=11590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201377661.973:1975): login pid=11590 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201377661.980:1976): user pid=11590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201377661.985:1977): user pid=11590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201377661.985:1978): user pid=11590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201378501.993:1979): user pid=11818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201378501.994:1980): user pid=11818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201378501.994:1981): login pid=11818 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201378501.999:1982): user pid=11818 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201380301.624:1983): user pid=12364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201380301.624:1984): user pid=12364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201380301.625:1985): login pid=12364 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201380301.633:1986): user pid=12364 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201381261.212:1987): user pid=12696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201381261.213:1988): user pid=12696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201381261.213:1989): login pid=12696 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201381261.221:1990): user pid=12696 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201381261.226:1991): user pid=12696 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201381261.227:1992): user pid=12696 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201382101.235:1993): user pid=13006 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201382101.236:1994): user pid=13006 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201382101.236:1995): login pid=13006 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201382101.244:1996): user pid=13006 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201383901.273:1997): user pid=13614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201383901.273:1998): user pid=13614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201383901.273:1999): login pid=13614 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201383901.281:2000): user pid=13614 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201384861.616:2001): user pid=13924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201384861.616:2002): user pid=13924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201384861.616:2003): login pid=13924 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201384861.625:2004): user pid=13924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201384861.631:2005): user pid=13924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201384861.631:2006): user pid=13924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201385701.640:2007): user pid=15784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201385701.640:2008): user pid=15784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201385701.640:2009): login pid=15784 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201385701.647:2010): user pid=15784 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201387501.699:2011): user pid=19254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201387501.699:2012): user pid=19254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201387501.699:2013): login pid=19254 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201387501.706:2014): user pid=19254 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201388276.234:2015): avc: denied { getattr } for pid=19941 comm="cups-driverd" path="/usr/local/bin/foomatic-ppdfile" dev=dm-0 ino=44695592 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file >type=SYSCALL msg=audit(1201388276.234:2015): arch=40000003 syscall=195 success=yes exit=0 a0=bfd21478 a1=40496a48 a2=402f9ff4 a3=bfd21478 items=0 ppid=5455 pid=19941 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cups-driverd" exe="/usr/lib/cups/daemon/cups-driverd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201388276.237:2016): avc: denied { execute } for pid=19942 comm="sh" name="foomatic-ppdfile" dev=dm-0 ino=44695592 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file >type=AVC msg=audit(1201388276.237:2016): avc: denied { read } for pid=19942 comm="sh" name="foomatic-ppdfile" dev=dm-0 ino=44695592 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file >type=AVC msg=audit(1201388276.237:2016): avc: denied { execute_no_trans } for pid=19942 comm="sh" path="/usr/local/bin/foomatic-ppdfile" dev=dm-0 ino=44695592 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file >type=SYSCALL msg=audit(1201388276.237:2016): arch=40000003 syscall=11 success=yes exit=0 a0=8425cd0 a1=8425d70 a2=8424f98 a3=40 items=0 ppid=19941 pid=19942 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201388276.239:2017): avc: denied { ioctl } for pid=19942 comm="foomatic" path="/usr/local/bin/foomatic-ppdfile" dev=dm-0 ino=44695592 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file >type=SYSCALL msg=audit(1201388276.239:2017): arch=40000003 syscall=54 success=no exit=-25 a0=4 a1=5401 a2=bfb309e8 a3=bfb30a28 items=0 ppid=19941 pid=19942 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201388406.445:2018): avc: denied { getattr } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201388406.445:2018): arch=40000003 syscall=229 success=yes exit=33 a0=41e874e8 a1=402a6723 a2=42629f58 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201388406.446:2019): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201388406.490:2020): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201388406.494:2021): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1201388461.549:2022): user pid=20001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201388461.550:2023): user pid=20001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201388461.550:2024): login pid=20001 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201388461.559:2025): user pid=20001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201388461.564:2026): user pid=20001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201388461.564:2027): user pid=20001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201389301.573:2028): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201389301.574:2029): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201389301.574:2030): login pid=20251 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201389301.583:2031): user pid=20251 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201391101.512:2032): user pid=20793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201391101.512:2033): user pid=20793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201391101.512:2034): login pid=20793 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201391101.521:2035): user pid=20793 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201392061.918:2036): user pid=21094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201392061.919:2037): user pid=21094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201392061.919:2038): login pid=21094 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201392061.925:2039): user pid=21094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201392061.930:2040): user pid=21094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201392061.931:2041): user pid=21094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201392901.939:2042): user pid=21323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201392901.940:2043): user pid=21323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201392901.940:2044): login pid=21323 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201392901.948:2045): user pid=21323 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201394701.139:2046): user pid=21880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201394701.139:2047): user pid=21880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201394701.140:2048): login pid=21880 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201394701.145:2049): user pid=21880 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201395661.610:2050): user pid=22181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201395661.610:2051): user pid=22181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201395661.611:2052): login pid=22181 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201395661.619:2053): user pid=22181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201395661.624:2054): user pid=22181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201395661.624:2055): user pid=22181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201396501.632:2056): user pid=22454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201396501.633:2057): user pid=22454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201396501.633:2058): login pid=22454 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201396501.639:2059): user pid=22454 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201398301.727:2060): user pid=24128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201398301.728:2061): user pid=24128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201398301.728:2062): login pid=24128 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201398301.733:2063): user pid=24128 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201398622.480:2064): avc: denied { getattr } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201398622.480:2064): arch=40000003 syscall=229 success=yes exit=33 a0=42627a88 a1=402a6723 a2=42621ae8 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201398622.480:2065): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201398622.491:2066): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201398730.736:2067): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201398738.129:2068): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1201399261.512:2069): user pid=26199 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201399261.512:2070): user pid=26199 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201399261.512:2071): login pid=26199 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201399261.520:2072): user pid=26199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201399261.525:2073): user pid=26199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201399261.525:2074): user pid=26199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201400101.534:2075): user pid=26445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201400101.535:2076): user pid=26445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201400101.535:2077): login pid=26445 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201400101.540:2078): user pid=26445 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201401901.272:2079): user pid=26954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201401901.273:2080): user pid=26954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201401901.273:2081): login pid=26954 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201401901.280:2082): user pid=26954 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201402861.479:2083): user pid=27261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201402861.479:2084): user pid=27261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201402861.479:2085): login pid=27261 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201402861.489:2086): user pid=27261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201402861.494:2087): user pid=27261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201402861.494:2088): user pid=27261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201403701.502:2089): user pid=27490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201403701.503:2090): user pid=27490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201403701.503:2091): login pid=27490 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201403701.510:2092): user pid=27490 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201405501.732:2093): user pid=28036 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201405501.733:2094): user pid=28036 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201405501.733:2095): login pid=28036 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201405501.741:2096): user pid=28036 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201406461.925:2097): user pid=28338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201406461.925:2098): user pid=28338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201406461.925:2099): login pid=28338 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201406461.932:2100): user pid=28338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201406461.937:2101): user pid=28338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201406461.937:2102): user pid=28338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201407301.946:2103): user pid=28571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201407301.947:2104): user pid=28571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201407301.947:2105): login pid=28571 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201407301.954:2106): user pid=28571 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201409101.201:2107): user pid=31712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201409101.202:2108): user pid=31712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201409101.202:2109): login pid=31712 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201409101.210:2110): user pid=31712 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201410061.866:2111): user pid=32417 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201410061.866:2112): user pid=32417 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201410061.867:2113): login pid=32417 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201410061.875:2114): user pid=32417 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201410061.880:2115): user pid=32417 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201410061.880:2116): user pid=32417 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201410901.889:2117): user pid=32655 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201410901.889:2118): user pid=32655 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201410901.889:2119): login pid=32655 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201410901.898:2120): user pid=32655 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201412701.669:2121): user pid=759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201412701.670:2122): user pid=759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201412701.670:2123): login pid=759 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201412701.679:2124): user pid=759 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201413661.036:2125): user pid=1065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201413661.036:2126): user pid=1065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201413661.036:2127): login pid=1065 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201413661.042:2128): user pid=1065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201413661.047:2129): user pid=1065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201413661.047:2130): user pid=1065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201414501.055:2131): user pid=1254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201414501.055:2132): user pid=1254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201414501.056:2133): login pid=1254 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201414501.061:2134): user pid=1254 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201416301.038:2135): user pid=1733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201416301.039:2136): user pid=1733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201416301.039:2137): login pid=1733 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201416301.044:2138): user pid=1733 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201417261.516:2139): user pid=2031 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201417261.517:2140): user pid=2031 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201417261.517:2141): login pid=2031 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201417261.525:2142): user pid=2031 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201417261.530:2143): user pid=2031 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201417261.530:2144): user pid=2031 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201418101.539:2145): user pid=2279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201418101.539:2146): user pid=2279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201418101.539:2147): login pid=2279 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201418101.548:2148): user pid=2279 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201419901.026:2149): user pid=2919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201419901.026:2150): user pid=2919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201419901.026:2151): login pid=2919 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201419901.032:2152): user pid=2919 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201420861.586:2153): user pid=3256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201420861.586:2154): user pid=3256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201420861.586:2155): login pid=3256 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201420861.595:2156): user pid=3256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201420861.601:2157): user pid=3256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201420861.601:2158): user pid=3256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201421701.610:2159): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201421701.611:2160): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201421701.611:2161): login pid=3534 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201421701.617:2162): user pid=3534 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201423501.430:2163): user pid=4087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201423501.431:2164): user pid=4087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201423501.431:2165): login pid=4087 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201423501.438:2166): user pid=4087 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201424461.007:2167): user pid=4403 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201424461.008:2168): user pid=4403 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201424461.008:2169): login pid=4403 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201424461.015:2170): user pid=4403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201424461.020:2171): user pid=4403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201424461.020:2172): user pid=4403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201425301.028:2173): user pid=4632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201425301.029:2174): user pid=4632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201425301.029:2175): login pid=4632 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201425301.034:2176): user pid=4632 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201427101.610:2177): user pid=5171 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201427101.610:2178): user pid=5171 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201427101.610:2179): login pid=5171 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201427101.617:2180): user pid=5171 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201428061.719:2181): user pid=5473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201428061.719:2182): user pid=5473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201428061.720:2183): login pid=5473 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201428061.726:2184): user pid=5473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201428061.731:2185): user pid=5473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201428061.731:2186): user pid=5473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201428121.738:2187): user pid=5492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201428121.738:2188): user pid=5492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201428121.739:2189): login pid=5492 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201428121.747:2190): user pid=5492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201428703.270:2191): user pid=5492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201428703.270:2192): user pid=5492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201428901.279:2193): user pid=6679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201428901.280:2194): user pid=6679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201428901.280:2195): login pid=6679 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201428901.288:2196): user pid=6679 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201429321.134:2197): user pid=6846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201429321.134:2198): user pid=6846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201429321.134:2199): login pid=6846 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201429321.141:2200): user pid=6846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201430101.941:2201): user pid=6846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201430101.941:2202): user pid=6846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201430701.949:2203): user pid=12667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201430701.950:2204): user pid=12667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201430701.950:2205): login pid=12667 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201430701.957:2206): user pid=12667 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201431661.546:2207): user pid=12988 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201431661.547:2208): user pid=12988 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201431661.547:2209): login pid=12988 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201431661.554:2210): user pid=12988 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201431661.559:2211): user pid=12988 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201431661.559:2212): user pid=12988 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201432501.566:2213): user pid=13217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201432501.566:2214): user pid=13217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201432501.567:2215): login pid=13217 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201432501.574:2216): user pid=13217 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201432801.986:2217): user pid=13349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201432801.986:2218): user pid=13349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201432801.987:2219): login pid=13349 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201432801.995:2220): user pid=13349 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201433401.488:2221): user pid=17015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201433401.489:2222): user pid=17015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201433401.489:2223): login pid=17015 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201433401.494:2224): user pid=17015 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201434301.552:2225): user pid=18018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201434301.552:2226): user pid=18018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201434301.552:2227): login pid=18018 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201434301.557:2228): user pid=18018 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201435261.079:2229): user pid=18320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201435261.080:2230): user pid=18320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201435261.080:2231): login pid=18320 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201435261.088:2232): user pid=18320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201435261.092:2233): user pid=18320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201435261.092:2234): user pid=18320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201436101.101:2235): user pid=18553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201436101.102:2236): user pid=18553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201436101.102:2237): login pid=18553 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201436101.110:2238): user pid=18553 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201437901.494:2239): user pid=19201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201437901.495:2240): user pid=19201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201437901.495:2241): login pid=19201 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201437901.500:2242): user pid=19201 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201438861.060:2243): user pid=19522 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201438861.060:2244): user pid=19522 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201438861.061:2245): login pid=19522 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201438861.067:2246): user pid=19522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201438861.072:2247): user pid=19522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201438861.072:2248): user pid=19522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201439368.022:2249): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19690 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201439701.081:2250): user pid=19780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201439701.081:2251): user pid=19781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201439701.081:2252): user pid=19780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201439701.081:2253): login pid=19780 uid=0 old auid=4294967295 new auid=500 >type=CRED_ACQ msg=audit(1201439701.082:2254): user pid=19781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201439701.082:2255): login pid=19781 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201439701.090:2256): user pid=19780 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1201439701.090:2257): user pid=19781 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201441501.527:2258): user pid=20358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201441501.528:2259): user pid=20358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201441501.528:2260): login pid=20358 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201441501.536:2261): user pid=20358 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201442461.030:2262): user pid=20672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201442461.031:2263): user pid=20672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201442461.031:2264): login pid=20672 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201442461.039:2265): user pid=20672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201442461.065:2266): user pid=20672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201442461.066:2267): user pid=20672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201443301.074:2268): user pid=20900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201443301.075:2269): user pid=20900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201443301.075:2270): login pid=20900 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201443301.082:2271): user pid=20900 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201445101.998:2272): user pid=21634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201445101.998:2273): user pid=21634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201445101.999:2274): login pid=21634 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201445102.006:2275): user pid=21634 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201446061.570:2276): user pid=22073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201446061.570:2277): user pid=22073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201446061.570:2278): login pid=22073 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201446061.577:2279): user pid=22073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201446061.582:2280): user pid=22073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201446061.582:2281): user pid=22073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201446901.590:2282): user pid=22303 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201446901.591:2283): user pid=22303 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201446901.591:2284): login pid=22303 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201446901.596:2285): user pid=22303 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201448701.144:2286): user pid=22979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201448701.144:2287): user pid=22979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201448701.145:2288): login pid=22979 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201448701.153:2289): user pid=22979 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201449661.808:2290): user pid=23465 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201449661.808:2291): user pid=23465 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201449661.809:2292): login pid=23465 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201449661.817:2293): user pid=23465 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201449661.822:2294): user pid=23465 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201449661.823:2295): user pid=23465 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201450501.832:2296): user pid=23750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201450501.832:2297): user pid=23750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201450501.833:2298): login pid=23750 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201450501.841:2299): user pid=23750 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201452301.311:2300): user pid=24543 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201452301.311:2301): user pid=24543 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201452301.311:2302): login pid=24543 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201452301.318:2303): user pid=24543 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201453261.847:2304): user pid=24866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201453261.847:2305): user pid=24866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201453261.847:2306): login pid=24866 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201453261.857:2307): user pid=24866 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201453261.861:2308): user pid=24866 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201453261.861:2309): user pid=24866 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201454101.870:2310): user pid=25094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201454101.871:2311): user pid=25094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201454101.871:2312): login pid=25094 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201454101.879:2313): user pid=25094 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201455901.378:2314): user pid=25618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201455901.379:2315): user pid=25618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201455901.379:2316): login pid=25618 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201455901.384:2317): user pid=25618 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201456861.896:2318): user pid=25924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201456861.896:2319): user pid=25924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201456861.896:2320): login pid=25924 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201456861.907:2321): user pid=25924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201456861.912:2322): user pid=25924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201456861.912:2323): user pid=25924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201457701.921:2324): user pid=26161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201457701.921:2325): user pid=26161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201457701.921:2326): login pid=26161 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201457701.929:2327): user pid=26161 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201459501.567:2328): user pid=26688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201459501.568:2329): user pid=26688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201459501.568:2330): login pid=26688 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201459501.575:2331): user pid=26688 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201460461.847:2332): user pid=26987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201460461.848:2333): user pid=26987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201460461.848:2334): login pid=26987 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201460461.855:2335): user pid=26987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201460461.860:2336): user pid=26987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201460461.860:2337): user pid=26987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201461301.869:2338): user pid=27215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201461301.869:2339): user pid=27215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201461301.869:2340): login pid=27215 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201461301.878:2341): user pid=27215 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201463101.200:2342): user pid=27743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201463101.201:2343): user pid=27743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201463101.201:2344): login pid=27743 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201463101.206:2345): user pid=27743 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201464061.530:2346): user pid=28049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201464061.531:2347): user pid=28049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201464061.531:2348): login pid=28049 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201464061.538:2349): user pid=28049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201464061.543:2350): user pid=28049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201464061.543:2351): user pid=28049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201464901.551:2352): user pid=28280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201464901.551:2353): user pid=28280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201464901.552:2354): login pid=28280 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201464901.559:2355): user pid=28280 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201466701.544:2356): user pid=28809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201466701.544:2357): user pid=28809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201466701.545:2358): login pid=28809 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201466701.551:2359): user pid=28809 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201467661.383:2360): user pid=29111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201467661.383:2361): user pid=29111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201467661.384:2362): login pid=29111 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201467661.392:2363): user pid=29111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201467661.397:2364): user pid=29111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201467661.397:2365): user pid=29111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201468501.406:2366): user pid=29339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201468501.406:2367): user pid=29339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201468501.406:2368): login pid=29339 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201468501.412:2369): user pid=29339 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201470301.844:2370): user pid=29866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201470301.844:2371): user pid=29866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201470301.845:2372): login pid=29866 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201470301.850:2373): user pid=29866 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201471261.795:2374): user pid=30167 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201471261.795:2375): user pid=30167 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201471261.796:2376): login pid=30167 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201471261.804:2377): user pid=30167 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201471261.809:2378): user pid=30167 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201471261.809:2379): user pid=30167 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201472101.818:2380): user pid=30398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201472101.818:2381): user pid=30398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201472101.819:2382): login pid=30398 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201472101.825:2383): user pid=30398 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201473901.667:2384): user pid=30947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201473901.668:2385): user pid=30947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201473901.669:2386): login pid=30947 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201473901.675:2387): user pid=30947 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201474278.338:2388): avc: denied { write } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201474278.338:2388): arch=40000003 syscall=5 success=yes exit=21 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201474685.131:2389): avc: denied { getattr } for pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201474685.131:2389): arch=40000003 syscall=229 success=yes exit=33 a0=42649c48 a1=402a6723 a2=4262dba8 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201474685.132:2390): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1201474861.060:2391): user pid=31346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201474861.061:2392): user pid=31346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201474861.061:2393): login pid=31346 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201474861.070:2394): user pid=31346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201474861.075:2395): user pid=31346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201474861.076:2396): user pid=31346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201475701.084:2397): user pid=31986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201475701.085:2398): user pid=31986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201475701.085:2399): login pid=31986 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201475701.093:2400): user pid=31986 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201477501.490:2401): user pid=32543 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201477501.491:2402): user pid=32543 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201477501.491:2403): login pid=32543 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201477501.498:2404): user pid=32543 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201478461.492:2405): user pid=378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201478461.492:2406): user pid=378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201478461.492:2407): login pid=378 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201478461.500:2408): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201478461.505:2409): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201478461.506:2410): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201479301.514:2411): user pid=618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201479301.515:2412): user pid=618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201479301.515:2413): login pid=618 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201479301.523:2414): user pid=618 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201481101.592:2415): user pid=1312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201481101.593:2416): user pid=1312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201481101.593:2417): login pid=1312 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201481101.598:2418): user pid=1312 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201482061.139:2419): user pid=1635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201482061.139:2420): user pid=1635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201482061.140:2421): login pid=1635 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201482061.148:2422): user pid=1635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201482061.153:2423): user pid=1635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201482061.153:2424): user pid=1635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201482901.160:2425): user pid=1975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201482901.161:2426): user pid=1975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201482901.161:2427): login pid=1975 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201482901.168:2428): user pid=1975 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201484701.878:2429): user pid=2848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201484701.879:2430): user pid=2848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201484701.879:2431): login pid=2848 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201484701.887:2432): user pid=2848 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201485661.085:2433): user pid=3487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201485661.085:2434): user pid=3487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201485661.086:2435): login pid=3487 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201485661.094:2436): user pid=3487 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201485661.098:2437): user pid=3487 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201485661.098:2438): user pid=3487 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201486501.106:2439): user pid=3735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201486501.106:2440): user pid=3735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201486501.106:2441): login pid=3735 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201486501.112:2442): user pid=3735 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201488301.711:2443): user pid=4312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201488301.711:2444): user pid=4312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201488301.712:2445): login pid=4312 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201488301.718:2446): user pid=4312 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201489261.117:2447): user pid=4618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201489261.118:2448): user pid=4618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201489261.118:2449): login pid=4618 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201489261.127:2450): user pid=4618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201489261.132:2451): user pid=4618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201489261.132:2452): user pid=4618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201490101.141:2453): user pid=4851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201490101.142:2454): user pid=4851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201490101.142:2455): login pid=4851 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201490101.148:2456): user pid=4851 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201491901.678:2457): user pid=5381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201491901.679:2458): user pid=5381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201491901.679:2459): login pid=5381 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201491901.685:2460): user pid=5381 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201492861.104:2461): user pid=5684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201492861.104:2462): user pid=5684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201492861.104:2463): login pid=5684 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201492861.112:2464): user pid=5684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201492861.117:2465): user pid=5684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201492861.117:2466): user pid=5684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201493701.126:2467): user pid=5931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201493701.126:2468): user pid=5931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201493701.127:2469): login pid=5931 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201493701.133:2470): user pid=5931 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201495501.992:2471): user pid=6781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201495501.992:2472): user pid=6781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201495501.992:2473): login pid=6781 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201495501.997:2474): user pid=6781 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201496461.904:2475): user pid=7909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201496461.904:2476): user pid=7909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201496461.905:2477): login pid=7909 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201496461.914:2478): user pid=7909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201496461.918:2479): user pid=7909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201496461.918:2480): user pid=7909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201497301.927:2481): user pid=8153 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201497301.928:2482): user pid=8153 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201497301.928:2483): login pid=8153 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201497301.936:2484): user pid=8153 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201499101.237:2485): user pid=8703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201499101.238:2486): user pid=8703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201499101.238:2487): login pid=8703 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201499101.246:2488): user pid=8703 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201500061.185:2489): user pid=9010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201500061.185:2490): user pid=9010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201500061.186:2491): login pid=9010 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201500061.191:2492): user pid=9010 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201500061.196:2493): user pid=9010 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201500061.196:2494): user pid=9010 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201500901.204:2495): user pid=9244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201500901.205:2496): user pid=9244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201500901.205:2497): login pid=9244 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201500901.212:2498): user pid=9244 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201502701.997:2499): user pid=9892 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201502701.998:2500): user pid=9892 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201502701.998:2501): login pid=9892 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201502702.006:2502): user pid=9892 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201503661.339:2503): user pid=10201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201503661.339:2504): user pid=10201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201503661.340:2505): login pid=10201 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201503661.348:2506): user pid=10201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201503661.352:2507): user pid=10201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201503661.352:2508): user pid=10201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201504501.360:2509): user pid=10429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201504501.360:2510): user pid=10429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201504501.360:2511): login pid=10429 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201504501.366:2512): user pid=10429 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201506301.824:2513): user pid=10960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201506301.824:2514): user pid=10960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201506301.824:2515): login pid=10960 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201506301.833:2516): user pid=10960 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201507261.641:2517): user pid=11265 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201507261.642:2518): user pid=11265 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201507261.642:2519): login pid=11265 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201507261.648:2520): user pid=11265 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201507261.652:2521): user pid=11265 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201507261.653:2522): user pid=11265 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201508101.661:2523): user pid=11493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201508101.662:2524): user pid=11493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201508101.662:2525): login pid=11493 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201508101.670:2526): user pid=11493 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201509001.704:2527): user pid=11787 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201509001.705:2528): user pid=11787 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201509001.705:2529): login pid=11787 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201509001.713:2530): user pid=11787 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201509901.705:2531): user pid=26238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201509901.706:2532): user pid=26238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201509901.706:2533): login pid=26238 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201509901.715:2534): user pid=26238 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201510861.531:2535): user pid=8312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201510861.532:2536): user pid=8312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201510861.532:2537): login pid=8312 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201510861.538:2538): user pid=8312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201510861.544:2539): user pid=8312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201510861.544:2540): user pid=8312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201511701.552:2541): user pid=4469 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201511701.552:2542): user pid=4469 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201511701.553:2543): login pid=4469 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201511701.556:2544): user pid=4469 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201513501.576:2545): user pid=5166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201513501.577:2546): user pid=5166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201513501.577:2547): login pid=5166 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201513501.582:2548): user pid=5166 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201514461.515:2549): user pid=5603 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201514461.516:2550): user pid=5603 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201514461.516:2551): login pid=5603 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201514461.524:2552): user pid=5603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201514461.529:2553): user pid=5603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201514461.529:2554): user pid=5603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201514521.536:2555): user pid=5634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201514521.536:2556): user pid=5634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201514521.536:2557): login pid=5634 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201514521.543:2558): user pid=5634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201515057.928:2559): user pid=5634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201515057.929:2560): user pid=5634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201515301.938:2561): user pid=6653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201515301.939:2562): user pid=6653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201515301.939:2563): login pid=6653 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201515301.946:2564): user pid=6653 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201515969.889:2565): user pid=7280 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201515969.889:2566): user pid=7280 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201515969.966:2567): user pid=7280 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201516230.649:2568): user pid=7424 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=deleting user entries acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201516230.655:2569): user pid=7424 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=deleting group acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201516232.524:2570): user pid=7427 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=delete SELinux user mapping acct="rpc" old-seuser=? old-role=? old-range=? new-seuser=? new-role=? new-range=? exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201516232.667:2571): user pid=7430 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=deleting group acct=rpc exe="/usr/sbin/groupdel" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201516232.679:2572): user pid=7431 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=rpc exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201516232.742:2573): user pid=7435 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=rpc exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201516284.008:2574): avc: denied { getattr } for pid=7558 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201516284.008:2574): arch=40000003 syscall=229 success=yes exit=33 a0=b961cba8 a1=32c723 a2=b961cbc0 a3=ff items=0 ppid=7557 pid=7558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201516284.008:2575): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201516284.018:2576): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201516284.023:2577): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201516284.065:2578): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201516284.077:2579): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201516284.080:2580): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201516284.084:2581): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201516284.087:2582): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201516284.113:2583): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201516284.120:2584): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1201516895.385:2585): user pid=7280 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201517101.088:2586): user pid=7933 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201517101.089:2587): user pid=7933 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201517101.089:2588): login pid=7933 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201517101.094:2589): user pid=7933 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201517516.021:2590): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8091 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201518061.578:2591): user pid=8242 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201518061.579:2592): user pid=8242 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201518061.579:2593): login pid=8242 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201518061.586:2594): user pid=8242 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201518061.591:2595): user pid=8242 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201518061.591:2596): user pid=8242 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201518901.600:2597): user pid=8470 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201518901.601:2598): user pid=8470 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201518901.601:2599): login pid=8470 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201518901.606:2600): user pid=8470 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201519201.070:2601): user pid=8594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201519201.070:2602): user pid=8594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201519201.070:2603): login pid=8594 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201519201.078:2604): user pid=8594 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201519801.496:2605): user pid=12390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201519801.497:2606): user pid=12390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201519801.497:2607): login pid=12390 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201519801.504:2608): user pid=12390 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201520701.682:2609): user pid=13396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201520701.683:2610): user pid=13396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201520701.683:2611): login pid=13396 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201520701.690:2612): user pid=13396 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201521661.700:2613): user pid=13703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201521661.700:2614): user pid=13703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201521661.700:2615): login pid=13703 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201521661.709:2616): user pid=13703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201521661.713:2617): user pid=13703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201521661.713:2618): user pid=13703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201522501.722:2619): user pid=13931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201522501.723:2620): user pid=13931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201522501.723:2621): login pid=13931 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201522501.731:2622): user pid=13931 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201523686.643:2623): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14295 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201524301.219:2624): user pid=14491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201524301.219:2625): user pid=14491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201524301.219:2626): login pid=14491 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201524301.227:2627): user pid=14491 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201525261.204:2628): user pid=14796 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201525261.205:2629): user pid=14796 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201525261.205:2630): login pid=14796 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201525261.213:2631): user pid=14796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201525261.218:2632): user pid=14796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201525261.218:2633): user pid=14796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201526101.227:2634): user pid=15027 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201526101.228:2635): user pid=15027 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201526101.229:2636): login pid=15027 uid=0 old auid=4294967295 new auid=500 >type=USER_ACCT msg=audit(1201526101.229:2637): user pid=15026 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201526101.230:2638): user pid=15026 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201526101.230:2639): login pid=15026 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201526101.236:2640): user pid=15027 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1201526101.238:2641): user pid=15026 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201526101.372:2642): avc: denied { write } for pid=15047 comm="rpc.statd" path="pipe:[2056216]" dev=pipefs ino=2056216 scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:system_r:automount_t:s0 tclass=fifo_file >type=SYSCALL msg=audit(1201526101.372:2642): arch=40000003 syscall=11 success=yes exit=0 a0=969c4a0 a1=969c340 a2=969c4c8 a3=969c340 items=0 ppid=15046 pid=15047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=system_u:system_r:rpcd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201527901.867:2643): user pid=15587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201527901.890:2644): user pid=15587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201527901.890:2645): login pid=15587 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201527901.895:2646): user pid=15587 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201528861.981:2647): user pid=15894 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201528861.981:2648): user pid=15894 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201528861.981:2649): login pid=15894 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201528861.989:2650): user pid=15894 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201528862.013:2651): user pid=15894 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201528862.013:2652): user pid=15894 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201529701.022:2653): user pid=16124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201529701.023:2654): user pid=16124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201529701.023:2655): login pid=16124 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201529701.031:2656): user pid=16124 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201531501.104:2657): user pid=16658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201531501.105:2658): user pid=16658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201531501.105:2659): login pid=16658 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201531501.112:2660): user pid=16658 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201532461.329:2661): user pid=16973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201532461.330:2662): user pid=16973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201532461.330:2663): login pid=16973 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201532461.337:2664): user pid=16973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201532461.342:2665): user pid=16973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201532461.342:2666): user pid=16973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201533301.350:2667): user pid=17695 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201533301.351:2668): user pid=17695 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201533301.351:2669): login pid=17695 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201533301.358:2670): user pid=17695 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201535101.336:2671): user pid=18616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201535101.337:2672): user pid=18616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201535101.337:2673): login pid=18616 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201535101.345:2674): user pid=18616 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201536062.004:2675): user pid=18964 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201536062.005:2676): user pid=18964 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201536062.005:2677): login pid=18964 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201536062.011:2678): user pid=18964 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201536062.016:2679): user pid=18964 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201536062.016:2680): user pid=18964 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201536901.023:2681): user pid=19226 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201536901.024:2682): user pid=19226 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201536901.025:2683): login pid=19226 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201536901.029:2684): user pid=19226 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201538701.113:2685): user pid=19847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201538701.113:2686): user pid=19847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201538701.113:2687): login pid=19847 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201538701.120:2688): user pid=19847 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201539661.615:2689): user pid=20319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201539661.615:2690): user pid=20319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201539661.616:2691): login pid=20319 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201539661.625:2692): user pid=20319 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201539661.632:2693): user pid=20319 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201539661.632:2694): user pid=20319 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201540501.641:2695): user pid=20675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201540501.641:2696): user pid=20675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201540501.641:2697): login pid=20675 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201540501.650:2698): user pid=20675 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201541454.834:2699): user pid=21064 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=rick exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/24 res=success)' >type=USER_ACCT msg=audit(1201541454.837:2700): user pid=21064 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/24 res=success)' >type=CRED_ACQ msg=audit(1201541454.847:2701): user pid=21064 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/24 res=success)' >type=USER_START msg=audit(1201541454.848:2702): user pid=21064 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/24 res=success)' >type=USER_END msg=audit(1201541454.848:2703): user pid=21064 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/24 res=success)' >type=USER_CMD msg=audit(1201541454.848:2704): user pid=21064 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/rick" cmd="/usr/bin/yum" (terminal=pts/24 res=success)' >type=USER_ACCT msg=audit(1201542301.908:2705): user pid=22589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201542301.909:2706): user pid=22589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201542301.909:2707): login pid=22589 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201542301.932:2708): user pid=22589 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201543261.866:2709): user pid=23049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201543261.866:2710): user pid=23049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201543261.867:2711): login pid=23049 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201543261.872:2712): user pid=23049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201543261.979:2713): user pid=23049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201543261.980:2714): user pid=23049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201544101.988:2715): user pid=23461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201544101.989:2716): user pid=23461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201544101.989:2717): login pid=23461 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201544101.994:2718): user pid=23461 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201544223.564:2719): user pid=23549 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=rick exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201544223.565:2720): user pid=23549 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201545901.446:2721): user pid=24345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201545901.447:2722): user pid=24345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201545901.447:2723): login pid=24345 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201545901.454:2724): user pid=24345 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201546861.303:2725): user pid=24689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201546861.303:2726): user pid=24689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201546861.303:2727): login pid=24689 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201546861.310:2728): user pid=24689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201546861.314:2729): user pid=24689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201546861.314:2730): user pid=24689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201547701.323:2731): user pid=24952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201547701.323:2732): user pid=24952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201547701.324:2733): login pid=24952 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201547701.331:2734): user pid=24952 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201549501.677:2735): user pid=25520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201549501.677:2736): user pid=25520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201549501.678:2737): login pid=25520 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201549501.684:2738): user pid=25520 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201550461.646:2739): user pid=26467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201550461.646:2740): user pid=26467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201550461.646:2741): login pid=26467 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201550461.652:2742): user pid=26467 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201550461.658:2743): user pid=26467 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201550461.658:2744): user pid=26467 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201551301.667:2745): user pid=26704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201551301.667:2746): user pid=26704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201551301.667:2747): login pid=26704 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201551301.674:2748): user pid=26704 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201553101.284:2749): user pid=27245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201553101.285:2750): user pid=27245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201553101.285:2751): login pid=27245 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201553101.291:2752): user pid=27245 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201554061.636:2753): user pid=27915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201554061.636:2754): user pid=27915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201554061.637:2755): login pid=27915 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201554061.646:2756): user pid=27915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201554061.650:2757): user pid=27915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201554061.650:2758): user pid=27915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201554901.658:2759): user pid=28264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201554901.659:2760): user pid=28264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201554901.659:2761): login pid=28264 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201554901.666:2762): user pid=28264 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201555219.535:2763): avc: denied { getattr } for pid=7558 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201555219.535:2763): arch=40000003 syscall=229 success=yes exit=33 a0=b9db28c8 a1=32c723 a2=b96262c0 a3=ff items=0 ppid=1 pid=7558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201555219.536:2764): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201555219.614:2765): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201555235.218:2766): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1201555271.374:2767): avc: denied { write } for pid=7558 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201555271.374:2767): arch=40000003 syscall=5 success=yes exit=22 a0=b960bf45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=7558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201555271.455:2768): avc: denied { ioctl } for pid=29543 comm="foomatic-rip" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201555271.455:2768): arch=40000003 syscall=54 success=no exit=-25 a0=1 a1=5401 a2=bfce92f8 a3=bfce9338 items=0 ppid=7558 pid=29543 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=ANOM_ABEND msg=audit(1201556634.322:2769): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=30423 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201556701.084:2770): user pid=30442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201556701.085:2771): user pid=30442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201556701.085:2772): login pid=30442 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201556701.091:2773): user pid=30442 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201557661.301:2774): user pid=30744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201557661.301:2775): user pid=30744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201557661.302:2776): login pid=30744 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201557661.310:2777): user pid=30744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201557661.314:2778): user pid=30744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201557661.314:2779): user pid=30744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201558501.322:2780): user pid=30974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201558501.322:2781): user pid=30974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201558501.322:2782): login pid=30974 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201558501.329:2783): user pid=30974 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201558686.680:2784): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=31077 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201560301.539:2785): user pid=31624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201560301.539:2786): user pid=31624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201560301.540:2787): login pid=31624 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201560301.548:2788): user pid=31624 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201561261.201:2789): user pid=32180 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201561261.202:2790): user pid=32180 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201561261.202:2791): login pid=32180 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201561261.206:2792): user pid=32180 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201561261.210:2793): user pid=32180 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201561261.210:2794): user pid=32180 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_LOGIN msg=audit(1201561516.516:2795): user pid=32260 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1201561516.522:2796): user pid=32260 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1201561520.254:2797): user pid=32260 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201561520.355:2798): user pid=32260 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201561520.453:2799): user pid=32260 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1201561520.455:2800): login pid=32260 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201561520.518:2801): user pid=32260 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201561520.649:2802): user pid=32265 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1201561520.970:2803): user pid=32260 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1201561521.071:2804): user pid=32260 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1201561635.585:2805): user pid=32335 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1201561635.590:2806): user pid=32335 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1201561638.767:2807): user pid=32335 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201561638.869:2808): user pid=32335 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201561638.942:2809): user pid=32335 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1201561638.943:2810): login pid=32335 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201561639.049:2811): user pid=32335 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201561639.180:2812): user pid=32339 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1201561639.498:2813): user pid=32335 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1201561639.568:2814): user pid=32335 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201562101.220:2815): user pid=32509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201562101.221:2816): user pid=32509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201562101.221:2817): login pid=32509 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201562101.230:2818): user pid=32509 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201563901.014:2819): user pid=668 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201563901.014:2820): user pid=668 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201563901.014:2821): login pid=668 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201563901.022:2822): user pid=668 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201564861.334:2823): user pid=1034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201564861.335:2824): user pid=1034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201564861.335:2825): login pid=1034 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201564861.344:2826): user pid=1034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201564861.349:2827): user pid=1034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201564861.349:2828): user pid=1034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201565701.358:2829): user pid=1339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201565701.359:2830): user pid=1339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201565701.359:2831): login pid=1339 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201565701.366:2832): user pid=1339 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201567501.100:2833): user pid=1980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201567501.100:2834): user pid=1980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201567501.101:2835): login pid=1980 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201567501.108:2836): user pid=1980 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201568461.191:2837): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201568461.191:2838): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201568461.191:2839): login pid=2305 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201568461.196:2840): user pid=2305 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201568461.200:2841): user pid=2305 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201568461.201:2842): user pid=2305 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201569301.209:2843): user pid=2572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201569301.209:2844): user pid=2572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201569301.209:2845): login pid=2572 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201569301.215:2846): user pid=2572 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201571101.930:2847): user pid=3223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201571101.931:2848): user pid=3223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201571101.931:2849): login pid=3223 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201571101.936:2850): user pid=3223 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201572061.789:2851): user pid=3581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201572061.789:2852): user pid=3581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201572061.790:2853): login pid=3581 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201572061.799:2854): user pid=3581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201572061.804:2855): user pid=3581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201572061.804:2856): user pid=3581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201572901.812:2857): user pid=3826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201572901.812:2858): user pid=3826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201572901.813:2859): login pid=3826 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201572901.818:2860): user pid=3826 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201574701.037:2861): user pid=4390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201574701.038:2862): user pid=4390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201574701.038:2863): login pid=4390 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201574701.045:2864): user pid=4390 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201575661.785:2865): user pid=4694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201575661.786:2866): user pid=4694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201575661.786:2867): login pid=4694 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201575661.793:2868): user pid=4694 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201575661.797:2869): user pid=4694 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201575661.797:2870): user pid=4694 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201576501.805:2871): user pid=4926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201576501.806:2872): user pid=4926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201576501.806:2873): login pid=4926 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201576501.814:2874): user pid=4926 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201578038.573:2875): avc: denied { getattr } for pid=6135 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23790434 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1201578038.573:2875): arch=40000003 syscall=195 success=yes exit=0 a0=b99d49b0 a1=bfd787ec a2=52bff4 a3=8170 items=0 ppid=2681 pid=6135 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1201578038.624:2876): avc: denied { read } for pid=6135 comm="httpd" name="index.rss" dev=dm-0 ino=23790434 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file >type=SYSCALL msg=audit(1201578038.624:2876): arch=40000003 syscall=5 success=yes exit=17 a0=b99d4a58 a1=8000 a2=1b6 a3=8000 items=0 ppid=2681 pid=6135 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) >type=USER_ACCT msg=audit(1201578301.038:2877): user pid=5491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201578301.038:2878): user pid=5491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201578301.039:2879): login pid=5491 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201578301.046:2880): user pid=5491 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201579261.011:2881): user pid=5872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201579261.012:2882): user pid=5872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201579261.012:2883): login pid=5872 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201579261.019:2884): user pid=5872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201579261.023:2885): user pid=5872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201579261.024:2886): user pid=5872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201580101.031:2887): user pid=6143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201580101.032:2888): user pid=6143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201580101.032:2889): login pid=6143 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201580101.039:2890): user pid=6143 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201581901.848:2891): user pid=7320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201581901.849:2892): user pid=7320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201581901.849:2893): login pid=7320 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201581901.855:2894): user pid=7320 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201582861.890:2895): user pid=7756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201582861.891:2896): user pid=7756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201582861.891:2897): login pid=7756 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201582861.897:2898): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201582861.903:2899): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201582861.904:2900): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201583701.912:2901): user pid=8113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201583701.913:2902): user pid=8113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201583701.913:2903): login pid=8113 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201583701.920:2904): user pid=8113 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201585035.587:2905): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8541 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201585501.413:2906): user pid=8674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201585501.414:2907): user pid=8674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201585501.415:2908): login pid=8674 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201585501.419:2909): user pid=8674 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201586461.549:2910): user pid=8995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201586461.549:2911): user pid=8995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201586461.549:2912): login pid=8995 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201586461.555:2913): user pid=8995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201586461.560:2914): user pid=8995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201586461.560:2915): user pid=8995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201587301.569:2916): user pid=9237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201587301.569:2917): user pid=9237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201587301.569:2918): login pid=9237 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201587301.577:2919): user pid=9237 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201587992.770:2920): user pid=9477 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201587992.770:2921): user pid=9477 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201587992.804:2922): user pid=9477 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201588279.220:2923): user pid=9477 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201588317.390:2924): user pid=9577 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201588317.390:2925): user pid=9577 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201588317.399:2926): user pid=9577 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201588521.044:2927): user pid=9577 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201589101.140:2928): user pid=9837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201589101.141:2929): user pid=9837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201589101.141:2930): login pid=9837 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201589101.148:2931): user pid=9837 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201590061.383:2932): user pid=10143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201590061.383:2933): user pid=10143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201590061.383:2934): login pid=10143 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201590061.392:2935): user pid=10143 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201590061.397:2936): user pid=10143 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201590061.397:2937): user pid=10143 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201590901.406:2938): user pid=10368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201590901.406:2939): user pid=10368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201590901.407:2940): login pid=10368 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201590901.414:2941): user pid=10368 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201592701.426:2942): user pid=10893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201592701.427:2943): user pid=10893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201592701.427:2944): login pid=10893 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201592701.434:2945): user pid=10893 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201593661.802:2946): user pid=11201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201593661.803:2947): user pid=11201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201593661.803:2948): login pid=11201 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201593661.809:2949): user pid=11201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201593661.813:2950): user pid=11201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201593661.813:2951): user pid=11201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201594501.822:2952): user pid=11426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201594501.822:2953): user pid=11426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201594501.822:2954): login pid=11426 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201594501.830:2955): user pid=11426 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201596301.988:2956): user pid=11955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201596301.988:2957): user pid=11955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201596301.989:2958): login pid=11955 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201596301.996:2959): user pid=11955 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201597261.893:2960): user pid=12255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201597261.893:2961): user pid=12255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201597261.893:2962): login pid=12255 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201597261.902:2963): user pid=12255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201597261.907:2964): user pid=12255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201597261.907:2965): user pid=12255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201598101.916:2966): user pid=12481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201598101.916:2967): user pid=12481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201598101.917:2968): login pid=12481 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201598101.925:2969): user pid=12481 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201599901.135:2970): user pid=13071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201599901.136:2971): user pid=13071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201599901.137:2972): login pid=13071 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201599901.142:2973): user pid=13071 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201600861.058:2974): user pid=13437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201600861.058:2975): user pid=13437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201600861.059:2976): login pid=13437 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201600861.067:2977): user pid=13437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201600861.072:2978): user pid=13437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201600861.072:2979): user pid=13437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201600921.079:2980): user pid=13454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201600921.079:2981): user pid=13454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201600921.080:2982): login pid=13454 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201600921.088:2983): user pid=13454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201601690.567:2984): user pid=13454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201601690.568:2985): user pid=13454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201601701.596:2986): user pid=16464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201601701.597:2987): user pid=16464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201601701.597:2988): login pid=16464 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201601701.606:2989): user pid=16464 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201603501.165:2990): user pid=17005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201603501.166:2991): user pid=17005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201603501.167:2992): login pid=17005 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201603501.172:2993): user pid=17005 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201604461.994:2994): user pid=17300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201604461.995:2995): user pid=17300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201604461.995:2996): login pid=17300 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201604462.001:2997): user pid=17300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201604462.007:2998): user pid=17300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201604462.007:2999): user pid=17300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201605301.016:3000): user pid=17531 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201605301.016:3001): user pid=17531 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201605301.017:3002): login pid=17531 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201605301.024:3003): user pid=17531 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201605601.496:3004): user pid=17639 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201605601.497:3005): user pid=17639 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201605601.497:3006): login pid=17639 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201605601.504:3007): user pid=17639 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201606201.497:3008): user pid=17891 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201606201.498:3009): user pid=17891 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201606201.498:3010): login pid=17891 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201606201.505:3011): user pid=17891 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201607101.116:3012): user pid=18587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201607101.116:3013): user pid=18587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201607101.117:3014): login pid=18587 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201607101.125:3015): user pid=18587 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201608061.020:3016): user pid=18899 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201608061.021:3017): user pid=18899 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201608061.021:3018): login pid=18899 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201608061.029:3019): user pid=18899 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201608061.034:3020): user pid=18899 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201608061.034:3021): user pid=18899 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201608901.043:3022): user pid=19126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201608901.043:3023): user pid=19126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201608901.043:3024): login pid=19126 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201608901.050:3025): user pid=19126 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201610701.574:3026): user pid=19654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201610701.575:3027): user pid=19654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201610701.575:3028): login pid=19654 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201610701.582:3029): user pid=19654 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201611661.858:3030): user pid=19959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201611661.858:3031): user pid=19959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201611661.858:3032): login pid=19959 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201611661.867:3033): user pid=19959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201611661.872:3034): user pid=19959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201611661.872:3035): user pid=19959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201612501.882:3036): user pid=20187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201612501.882:3037): user pid=20187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201612501.882:3038): login pid=20187 uid=0 old auid=4294967295 new auid=500 >type=USER_ACCT msg=audit(1201612501.884:3039): user pid=20186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201612501.885:3040): user pid=20186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201612501.885:3041): login pid=20186 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201612501.891:3042): user pid=20187 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1201612501.891:3043): user pid=20186 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201614301.668:3044): user pid=20729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201614301.690:3045): user pid=20729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201614301.691:3046): login pid=20729 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201614301.696:3047): user pid=20729 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201615261.943:3048): user pid=21130 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201615261.943:3049): user pid=21130 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201615261.943:3050): login pid=21130 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201615261.950:3051): user pid=21130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201615261.979:3052): user pid=21130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201615261.980:3053): user pid=21130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201616101.989:3054): user pid=21371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201616101.989:3055): user pid=21371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201616101.989:3056): login pid=21371 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201616101.996:3057): user pid=21371 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201617902.004:3058): user pid=21987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201617902.004:3059): user pid=21987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201617902.004:3060): login pid=21987 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201617902.010:3061): user pid=21987 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201618861.070:3062): user pid=22297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201618861.070:3063): user pid=22297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201618861.071:3064): login pid=22297 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201618861.077:3065): user pid=22297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201618861.082:3066): user pid=22297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201618861.082:3067): user pid=22297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201619701.091:3068): user pid=22604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201619701.092:3069): user pid=22604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201619701.092:3070): login pid=22604 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201619701.097:3071): user pid=22604 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201621501.864:3072): user pid=23210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201621501.864:3073): user pid=23210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201621501.864:3074): login pid=23210 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201621501.873:3075): user pid=23210 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201622461.211:3076): user pid=24800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201622461.212:3077): user pid=24800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201622461.212:3078): login pid=24800 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201622461.220:3079): user pid=24800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201622461.225:3080): user pid=24800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201622461.225:3081): user pid=24800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201623301.234:3082): user pid=25050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201623301.234:3083): user pid=25050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201623301.234:3084): login pid=25050 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201623301.242:3085): user pid=25050 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201625101.606:3086): user pid=25788 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201625101.606:3087): user pid=25788 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201625101.607:3088): login pid=25788 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201625101.616:3089): user pid=25788 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201625968.963:3090): user pid=26137 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201625969.002:3091): user pid=26137 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=LOGIN msg=audit(1201625969.003:3092): login pid=26137 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201625969.004:3093): user pid=26137 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201625969.005:3094): user pid=26140 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1201625969.614:3095): user pid=26137 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=USER_END msg=audit(1201625969.615:3096): user pid=26137 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201626061.296:3097): user pid=26223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201626061.297:3098): user pid=26223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201626061.298:3099): login pid=26223 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201626061.304:3100): user pid=26223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201626061.310:3101): user pid=26223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201626061.310:3102): user pid=26223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201626901.318:3103): user pid=26521 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201626901.318:3104): user pid=26521 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201626901.318:3105): login pid=26521 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201626901.326:3106): user pid=26521 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201626949.068:3107): avc: denied { getattr } for pid=26588 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201626949.068:3107): arch=40000003 syscall=229 success=yes exit=33 a0=b881cba8 a1=32c723 a2=b881cbc0 a3=ff items=0 ppid=26587 pid=26588 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201626949.069:3108): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201626949.096:3109): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201626949.122:3110): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201626949.139:3111): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201626949.151:3112): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201626949.156:3113): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201626949.160:3114): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201626949.164:3115): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201626949.179:3116): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201626949.186:3117): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=AVC msg=audit(1201627032.527:3118): avc: denied { write } for pid=26588 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201627032.527:3118): arch=40000003 syscall=5 success=yes exit=20 a0=b880bf45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=26588 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201627441.919:3119): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201627441.922:3120): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201627441.927:3121): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201627441.930:3122): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201627441.933:3123): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201627441.937:3124): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201627441.940:3125): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201627441.943:3126): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201627441.946:3127): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201627441.949:3128): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1201628701.208:3129): user pid=27158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201628701.209:3130): user pid=27158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201628701.209:3131): login pid=27158 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201628701.214:3132): user pid=27158 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201629661.575:3133): user pid=27536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201629661.576:3134): user pid=27536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201629661.576:3135): login pid=27536 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201629661.582:3136): user pid=27536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201629661.588:3137): user pid=27536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201629661.588:3138): user pid=27536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201630501.596:3139): user pid=27783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201630501.597:3140): user pid=27783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201630501.597:3141): login pid=27783 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201630501.602:3142): user pid=27783 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201632301.316:3143): user pid=28325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201632301.317:3144): user pid=28325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201632301.317:3145): login pid=28325 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201632301.330:3146): user pid=28325 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201633261.412:3147): user pid=28647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201633261.413:3148): user pid=28647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201633261.413:3149): login pid=28647 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201633261.421:3150): user pid=28647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201633261.426:3151): user pid=28647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201633261.426:3152): user pid=28647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201634101.435:3153): user pid=28877 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201634101.435:3154): user pid=28877 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201634101.435:3155): login pid=28877 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201634101.444:3156): user pid=28877 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201635901.921:3157): user pid=29405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201635901.922:3158): user pid=29405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201635901.922:3159): login pid=29405 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201635901.927:3160): user pid=29405 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201636861.996:3161): user pid=29713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201636861.997:3162): user pid=29713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201636861.997:3163): login pid=29713 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201636862.006:3164): user pid=29713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201636862.011:3165): user pid=29713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201636862.011:3166): user pid=29713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201637701.021:3167): user pid=29980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201637701.022:3168): user pid=29980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201637701.022:3169): login pid=29980 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201637701.027:3170): user pid=29980 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201639501.574:3171): user pid=30564 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201639501.574:3172): user pid=30564 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201639501.575:3173): login pid=30564 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201639501.583:3174): user pid=30564 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201640461.933:3175): user pid=30881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201640461.933:3176): user pid=30881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201640461.933:3177): login pid=30881 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201640461.938:3178): user pid=30881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201640461.943:3179): user pid=30881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201640461.943:3180): user pid=30881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201641301.951:3181): user pid=31185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201641301.951:3182): user pid=31185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201641301.951:3183): login pid=31185 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201641301.959:3184): user pid=31185 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201643101.550:3185): user pid=31846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201643101.550:3186): user pid=31846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201643101.551:3187): login pid=31846 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201643101.557:3188): user pid=31846 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201644061.360:3189): user pid=32173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201644061.360:3190): user pid=32173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201644061.361:3191): login pid=32173 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201644061.369:3192): user pid=32173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201644061.374:3193): user pid=32173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201644061.374:3194): user pid=32173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201644901.383:3195): user pid=32393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201644901.383:3196): user pid=32393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201644901.384:3197): login pid=32393 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201644901.391:3198): user pid=32393 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201645992.429:3199): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=32742 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201646701.311:3200): user pid=471 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201646701.311:3201): user pid=471 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201646701.311:3202): login pid=471 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201646701.319:3203): user pid=471 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201647661.091:3204): user pid=797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201647661.092:3205): user pid=797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201647661.092:3206): login pid=797 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201647661.100:3207): user pid=797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201647661.105:3208): user pid=797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201647661.105:3209): user pid=797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201648501.114:3210): user pid=1029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201648501.114:3211): user pid=1029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201648501.115:3212): login pid=1029 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201648501.120:3213): user pid=1029 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201650301.983:3214): user pid=1642 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201650301.984:3215): user pid=1642 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201650301.984:3216): login pid=1642 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201650301.991:3217): user pid=1642 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AVC msg=audit(1201650373.906:3218): user pid=2138 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_ACCT msg=audit(1201651261.936:3219): user pid=1977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201651261.937:3220): user pid=1977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201651261.937:3221): login pid=1977 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201651261.944:3222): user pid=1977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201651261.951:3223): user pid=1977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201651261.951:3224): user pid=1977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201652101.960:3225): user pid=2224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201652101.960:3226): user pid=2224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201652101.960:3227): login pid=2224 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201652101.969:3228): user pid=2224 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201653901.205:3229): user pid=3118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201653901.205:3230): user pid=3118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201653901.205:3231): login pid=3118 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201653901.211:3232): user pid=3118 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_LOGIN msg=audit(1201653967.153:3233): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1201653967.158:3234): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1201653970.210:3235): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201653970.350:3236): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1201653970.529:3237): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=LOGIN msg=audit(1201653970.531:3238): login pid=3187 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201653970.600:3239): user pid=3187 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1201653970.702:3240): user pid=3191 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1201653971.003:3241): user pid=3187 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_END msg=audit(1201653971.204:3242): user pid=3187 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1201654861.230:3243): user pid=3532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201654861.231:3244): user pid=3532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201654861.231:3245): login pid=3532 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201654861.239:3246): user pid=3532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201654861.244:3247): user pid=3532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201654861.245:3248): user pid=3532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201655701.254:3249): user pid=3785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201655701.254:3250): user pid=3785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201655701.254:3251): login pid=3785 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201655701.263:3252): user pid=3785 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201656029.430:3253): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3937 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201657501.381:3254): user pid=4363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201657501.382:3255): user pid=4363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201657501.382:3256): login pid=4363 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201657501.390:3257): user pid=4363 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201658461.341:3258): user pid=4673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201658461.341:3259): user pid=4673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201658461.342:3260): login pid=4673 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201658461.348:3261): user pid=4673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201658461.353:3262): user pid=4673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201658461.353:3263): user pid=4673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201659301.361:3264): user pid=4908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201659301.362:3265): user pid=4908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201659301.362:3266): login pid=4908 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201659301.369:3267): user pid=4908 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201661101.150:3268): user pid=5453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201661101.150:3269): user pid=5453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201661101.151:3270): login pid=5453 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201661101.159:3271): user pid=5453 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201662061.736:3272): user pid=5774 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201662061.737:3273): user pid=5774 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201662061.738:3274): login pid=5774 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201662061.742:3275): user pid=5774 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201662061.748:3276): user pid=5774 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201662061.749:3277): user pid=5774 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201662771.847:3278): user pid=5966 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201662771.847:3279): user pid=5966 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201662771.886:3280): user pid=5966 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201662901.758:3281): user pid=6025 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201662901.759:3282): user pid=6025 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201662901.759:3283): login pid=6025 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201662901.773:3284): user pid=6025 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AVC msg=audit(1201662931.262:3285): user pid=2138 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201662931.124:3286): policy loaded auid=500 >type=SYSCALL msg=audit(1201662931.124:3286): arch=40000003 syscall=4 success=yes exit=4036524 a0=4 a1=b7b0f000 a2=3d97ac a3=bfebf3b8 items=0 ppid=6024 pid=6077 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1201662993.424:3287): user pid=6218 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201662995.211:3288): user pid=6222 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201663008.562:3289): user pid=6223 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201663010.378:3290): user pid=6228 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201663012.150:3291): user pid=6229 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201663025.949:3292): user pid=6230 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_END msg=audit(1201663042.647:3293): user pid=5966 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201664701.459:3294): user pid=6783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201664701.460:3295): user pid=6783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201664701.461:3296): login pid=6783 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201664701.466:3297): user pid=6783 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201665661.534:3298): user pid=7155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201665661.534:3299): user pid=7155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201665661.534:3300): login pid=7155 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201665661.541:3301): user pid=7155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201665661.547:3302): user pid=7155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201665661.548:3303): user pid=7155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201666501.557:3304): user pid=7404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201666501.558:3305): user pid=7404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201666501.558:3306): login pid=7404 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201666501.564:3307): user pid=7404 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201667984.121:3308): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201668050.003:3309): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_END msg=audit(1201668082.219:3310): user pid=20390 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201668273.335:3311): avc: denied { getattr } for pid=8300 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201668273.335:3311): arch=40000003 syscall=229 success=yes exit=33 a0=41c9bba8 a1=402a5723 a2=41c9bbc0 a3=ff items=0 ppid=8299 pid=8300 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201668273.336:3312): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201668273.338:3313): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201668273.343:3314): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201668273.346:3315): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201668273.349:3316): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201668273.353:3317): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201668273.356:3318): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201668273.359:3319): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201668273.362:3320): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201668273.365:3321): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1201668301.598:3322): user pid=8337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201668301.599:3323): user pid=8337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201668301.599:3324): login pid=8337 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201668301.606:3325): user pid=8337 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201668785.780:3326): user pid=3233 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201668785.780:3327): user pid=3233 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1201668787.538:3328): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3147 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1201668800.339:8202): auditd normal halt, sending auid=4294967295 pid=9076 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201669370.029:8223): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=1902 res=success >type=CONFIG_CHANGE msg=audit(1201669370.129:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201669370.129:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201669370.196:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201669370.196:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1201669435.677:8): avc: denied { getattr } for pid=2854 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1201669435.677:8): arch=40000003 syscall=229 success=yes exit=33 a0=b82e1ba8 a1=32c723 a2=b82e1bc0 a3=ff items=0 ppid=2853 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1201669435.767:9): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201669435.901:10): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201669435.925:11): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201669436.059:12): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201669436.124:13): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201669436.180:14): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201669436.232:15): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201669436.248:16): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201669436.284:17): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1201669436.341:18): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1201669469.656:19): user pid=3132 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201669469.666:20): user pid=3132 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201669469.687:21): user pid=3132 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1201669469.692:22): login pid=3132 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1201669469.713:23): user pid=3132 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201669469.772:24): user pid=3132 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1201669469.773:25): user pid=3132 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201670101.408:26): user pid=6014 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201670101.409:27): user pid=6014 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201670101.410:28): login pid=6014 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201670101.416:29): user pid=6014 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201671901.872:30): user pid=6642 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201671901.872:31): user pid=6642 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201671901.873:32): login pid=6642 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201671901.879:33): user pid=6642 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1201672779.998:34): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6928 comm="f-spot" sig=6 >type=USER_ACCT msg=audit(1201672861.574:35): user pid=6955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201672861.575:36): user pid=6955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201672861.575:37): login pid=6955 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201672861.583:38): user pid=6955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201672861.619:39): user pid=6955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201672861.620:40): user pid=6955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201673701.629:41): user pid=7184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201673701.630:42): user pid=7184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201673701.630:43): login pid=7184 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201673701.638:44): user pid=7184 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201675501.111:45): user pid=7708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201675501.111:46): user pid=7708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201675501.112:47): login pid=7708 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201675501.119:48): user pid=7708 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201676461.370:49): user pid=8018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201676461.370:50): user pid=8018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201676461.370:51): login pid=8018 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201676461.375:52): user pid=8018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201676461.380:53): user pid=8018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201676461.381:54): user pid=8018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201677301.389:55): user pid=8247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201677301.389:56): user pid=8247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201677301.389:57): login pid=8247 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201677301.394:58): user pid=8247 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201679101.624:59): user pid=8771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201679101.625:60): user pid=8771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201679101.625:61): login pid=8771 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201679101.630:62): user pid=8771 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201680061.671:63): user pid=9072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201680061.672:64): user pid=9072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201680061.672:65): login pid=9072 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201680061.679:66): user pid=9072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201680061.685:67): user pid=9072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201680061.685:68): user pid=9072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201680901.694:69): user pid=9301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201680901.694:70): user pid=9301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201680901.695:71): login pid=9301 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201680901.700:72): user pid=9301 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201681801.500:73): user pid=9587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201681801.500:74): user pid=9587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201681801.501:75): login pid=9587 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201681801.509:76): user pid=9587 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201682701.502:77): user pid=27502 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201682701.502:78): user pid=27502 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201682701.502:79): login pid=27502 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201682701.507:80): user pid=27502 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201683661.684:81): user pid=5863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201683661.685:82): user pid=5863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201683661.685:83): login pid=5863 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201683661.690:84): user pid=5863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201683661.695:85): user pid=5863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201683661.696:86): user pid=5863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201684501.703:87): user pid=21739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201684501.704:88): user pid=21739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201684501.704:89): login pid=21739 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201684501.712:90): user pid=21739 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201686301.782:91): user pid=2278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201686301.783:92): user pid=2278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201686301.783:93): login pid=2278 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201686301.790:94): user pid=2278 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201687261.663:95): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201687261.664:96): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201687261.664:97): login pid=2670 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201687261.672:98): user pid=2670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201687261.677:99): user pid=2670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201687261.677:100): user pid=2670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201687321.684:101): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201687321.685:102): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201687321.685:103): login pid=2698 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201687321.690:104): user pid=2698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201688101.689:105): user pid=6462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201688101.690:106): user pid=6462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201688101.690:107): login pid=6462 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201688101.697:108): user pid=6462 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201688115.925:109): user pid=2698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201688115.926:110): user pid=2698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201689901.937:111): user pid=7500 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201689901.938:112): user pid=7500 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201689901.938:113): login pid=7500 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201689901.944:114): user pid=7500 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201690861.606:115): user pid=7808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201690861.607:116): user pid=7808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201690861.607:117): login pid=7808 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201690861.612:118): user pid=7808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201690861.617:119): user pid=7808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201690861.618:120): user pid=7808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201691701.627:121): user pid=8039 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201691701.627:122): user pid=8039 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201691701.628:123): login pid=8039 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201691701.634:124): user pid=8039 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201692001.761:125): user pid=8166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201692001.762:126): user pid=8166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201692001.762:127): login pid=8166 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201692001.770:128): user pid=8166 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201692601.421:129): user pid=11962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201692601.421:130): user pid=11962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201692601.421:131): login pid=11962 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201692601.429:132): user pid=11962 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201693501.598:133): user pid=12968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201693501.599:134): user pid=12968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201693501.599:135): login pid=12968 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201693501.606:136): user pid=12968 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201694461.953:137): user pid=13270 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201694461.954:138): user pid=13270 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201694461.954:139): login pid=13270 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201694461.961:140): user pid=13270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201694461.966:141): user pid=13270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201694461.966:142): user pid=13270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201695301.975:143): user pid=13510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201695301.976:144): user pid=13510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201695301.976:145): login pid=13510 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201695301.984:146): user pid=13510 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201697101.511:147): user pid=14042 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201697101.512:148): user pid=14042 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201697101.512:149): login pid=14042 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201697101.519:150): user pid=14042 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201698061.384:151): user pid=14344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201698061.385:152): user pid=14344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201698061.385:153): login pid=14344 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201698061.392:154): user pid=14344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201698061.397:155): user pid=14344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201698061.397:156): user pid=14344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201698901.406:157): user pid=14579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201698901.406:158): user pid=14578 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201698901.407:159): user pid=14578 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201698901.407:160): login pid=14578 uid=0 old auid=4294967295 new auid=500 >type=CRED_ACQ msg=audit(1201698901.407:161): user pid=14579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201698901.408:162): login pid=14579 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201698901.414:163): user pid=14578 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1201698901.415:164): user pid=14579 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201700701.209:165): user pid=15184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201700701.210:166): user pid=15184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201700701.210:167): login pid=15184 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201700701.224:168): user pid=15184 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201701661.869:169): user pid=15494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201701661.870:170): user pid=15494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201701661.870:171): login pid=15494 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201701661.876:172): user pid=15494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201701661.903:173): user pid=15494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201701661.903:174): user pid=15494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201702501.913:175): user pid=15728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201702501.913:176): user pid=15728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201702501.913:177): login pid=15728 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201702501.922:178): user pid=15728 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201704301.856:179): user pid=16262 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201704301.857:180): user pid=16262 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201704301.857:181): login pid=16262 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201704301.862:182): user pid=16262 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201705261.599:183): user pid=16561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201705261.599:184): user pid=16561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201705261.600:185): login pid=16561 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201705261.608:186): user pid=16561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201705261.612:187): user pid=16561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201705261.612:188): user pid=16561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201706101.621:189): user pid=16792 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201706101.622:190): user pid=16792 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201706101.622:191): login pid=16792 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201706101.629:192): user pid=16792 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201707901.811:193): user pid=17340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201707901.811:194): user pid=17340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201707901.811:195): login pid=17340 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1201707901.818:196): user pid=17340 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 430829
: 293421 |
293439